Server private key certificate

[Former Member]

Attempting to install our own signed certs under Configuration | Server Settings | Server Certificate and when I load the PEM file I get an error saying The server certificate could not be updated since the uploaded private key file did not contain a valid private key.

[Former Member · Accepted solution]

Hello @Former Member 

Thanks for your post!

I would like to request you to please refer the below KB article:

https://kcm.trellix.com/corporate/index?page=content&id=KB72477

The private key has to be extracted from the p12 cert and password removed before importing it into epo and the unencrypted private key is imported separate.

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

[cdinet]

You can also use the private key that you generated in step one of that KB after removing password from it.

[rlrenne]

That KB is no longer available and this solution no longer works.

I have removed the password and still get same message:

The server certificate could not be updated since the uploaded private key file did not contain a valid private key.

[cdinet]

It is available, our site changed from McAfee to Trellix.  

https://kcm.trellix.com/corporate/index?page=content&id=KB72477

Refer to step 7

Using the OpenSSL toolkit and the encrypted .key file from step 1, and create an unencrypted version of the private key for inputting into ePO:

For OpenSSL version 1.x, use the command below:

openssl rsa -in c:\ssl\keys\mcafee.key -out c:\ssl\keys\unsecured.mcafee.pem

For OpenSSL version 3.x, use the commands below:

NOTE: This step is critical when using a higher version of OpenSSL or any method that generates the key in pkcs8 format. Currently, we don't support pkcs8 for the browser certificate, so it's necessary to convert the pkcs8 key to pkcs1. Both the commands need to be executed.

openssl pkcs8 -in c:\ssl\keys\mcafee.key -topk8 -nocrypt -out c:\ssl\keys\pkcs8mcafee.pem

openssl pkcs8 -in c:\ssl\keys\pkcs8mcafee.pem -traditional -nocrypt -out c:\ssl\keys\unsecured.mcafee.pem