When submitting a certificate signing request (CSR) for a Managed PKI VPN certificate, you may receive the following error message:
If enrolling using Simple Certificate Enrollment Protocol (SCEP) from a Cisco router, you may recieve the following error message:
Certificate enrollment failed.
This issue occurs due to the server not able to parse certificate requests with the Subject Alternative Name (SAN) extension.
To resolve this issue, generate a new certificate signing request and resubmit the request.