Error importing certificate: Could Not Import Cert From Temp File

Products

• Carbon Black App Control

Issue/Introduction

• When attempting to import a .PFX certificate in the Carbon Black App Control console, the process fails.
• The error message "Error importing certificate: Could not import cert from temp file" is displayed.
• Manual database updates to the thumbprint may result in inconsistent behavior or unexpected thumbprints being displayed.

Environment

• Carbon Black App Control Server: 8.11.x

Cause

The import utility fails when the Subject Alternative Name (SAN) field in the certificate contains invalid formatting (such as forward slashes /) or when the DNS entry in the SAN does not exactly match the server name as recognized by the App Control console.

Resolution

1. Inspect the certificate to ensure the SAN DNS entry matches the App Control Server name (e.g., DNS=APPCSERVER.domain.com)
2. If the SAN field contains non-standard characters like /, regenerate the CSR and certificate without these characters.
3. Import the corrected .PFX file via System Configuration > Security.
4. Restart the Carbon Black Server and Reporter services.