Failed to import a local certificate
Symptom
A local certificate cannot be imported.
Analysis
The PKI domain has no CA certificate, and the certificate file to be imported does not contain the CA certificate chain.
CRL checking is enabled, but the device does not have a locally stored CRL and cannot obtain one.
The specified format does not match the actual format of the file to be imported.
The device and the certificate do not have the local key pair.
The certificate has been revoked.
The certificate is out of the validity period.
The system time is wrong.
Solution
Obtain or import the CA certificate.
Use undo crl check enable to disable CRL checking, or obtain the correct CRL before you import certificates.
Make sure the format of the file to be imported is correct.
Make sure the certificate file contains the private key.
Make sure the certificate is not revoked.
Make sure the certificate is valid.
Configure the correct system time for the device.
If the problem persists, contact Hewlett Packard Enterprise Support.