Finding License Private key

Hello Dear Group
I have an ASA5525, I need to renew the license that has been registered for Anyconnect VPN clients, but I forgot the private key that I have used for license registration. is there any solution to retrieving the private key because this key must be saved somewhere in Firewall.
Thank You
AliYashar

The private key is not a license. It's an element of the ASA configuration used for certificates.
If you need to renew your certificate (for SSL VPN or other purpose), you create a new Certificate Signing Request (CSR) and install the certificate you receive from the Certificate Authority (CA) following this procedure.
The private key (which is used to sign the CSR) is viewable via "show crypto key mypubkey rsa" command; although that's not needed when renewing an SSL certificate.
You cannot backup or export the private key by itself but you can export the keypair (private key and associated identity certificate) in pkcs12 format using the "crypto ca export" command (or backup menu choice in ASDM and select identity certificates)

Similar Messages

Private key for encryption / decryption in PI

Hi Experts,
Where do we find the private key installed in PI system that is used for secur communication ?
Thanks,
Dhawal

Hi Dhawal,
Did you try to search on SDN before asking this ?
There are many article available. Have a look at http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/40a08db9-59b6-2c10-5e8f-a4b2a9aaa3d2?quicklink=index&overridelayout=true and http://help.sap.com/saphelp_NW04/helpdata/en/39/83682615cd4f8197d0612529f2165f/content.htm.
Regards,
Sunil Chandra

How to find programatically the length of a private key?

Hello,
I generate a keystore and a private key in it with the command:
keytool -genkey -v -alias myPrivKey -keyalg RSA -keysize 4096I then can access the private key with the following code:
KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
InputStream is = new FileInputStream("/path/to/keystore", keyStorePassword);
ks.load(is);
KeyStore.PasswordProtection protParam = new KeyStore.PasswordProtection(privKeyPassword);
KeyStore.PrivateKeyEntry privKeyEntry = (KeyStore.PrivateKeyEntry)ks.getEntry("myPrivKey", protParam);
PrivateKey privKey = privKeyEntry.getPrivateKey();How can I get the length of the private key using the PrivateKey privKey object in my code? In this case I know it is 4096, but how can I find the lengths of arbitrary rsa private keys?
Thank you very much for your answers in advance.
Regards
Rambius

RSAPrivateKey privKey = (RSAPrivateKey)privKeyEntry.getPrivateKey();
BigInteger modulus = privKey.getModulus();
int length = modulus.bitLength(); // See the Javadoc for details

Is there any way to find whether the private key is capable of 40 bits encr

Is there any way to find whether the private key is capable of 40 bits encrypted or 128 bits encrypted.

kanth_kanth wrote:
Is there any way to find whether the private key is capable of 40 bits encrypted or 128 bits encrypted.Assuming an RSA private key, to get the number of bits extract the length of the 'modulus' in bytes and multiply by 8. How you extract the modulus depends on what format the private key has been stored in.

Adobe Content Server 4.1 - Cound not find server's private key in the keystore

Hello,
I have getting following error when i setup fulfillment services of Adobe Content Server 4.1.1
type Exception report
message
description The server encountered an internal error () that prevented it from fulfilling this request.
exception
javax.servlet.ServletException: Servlet execution threw an exception
root cause
java.lang.Error: Cound not find server's private key in the keystore
     com.adobe.adept.fulfillment.security.ServerConfig.init(ServerConfig.java:156)
     com.adobe.adept.fulfillment.security.ServerConfig.getSigningURL(ServerConfig.java:48)
     com.adobe.adept.fulfillment.servlet.FulfillmentServerStatus.getServers(FulfillmentServerStatus.java:34)
     com.adobe.adept.common.servlet.Status.checkUp(Status.java:355)
     com.adobe.adept.common.servlet.Status.doGet(Status.java:424)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
note The full stack trace of the root cause is available in the Apache Tomcat/6.0.20 logs.
My fulfillment-conf.txt contains following:
com.adobe.adept.log.level=trace
com.adobe.adept.log.file=C:\acs4\log\fulfillment.log
com.adobe.adept.persist.sql.driverClass=com.mysql.jdbc.Driver
com.adobe.adept.persist.sql.dialect=mysql
com.adobe.adept.persist.sql.connection=jdbc:mysql://127.0.0.1:3306/adept
com.adobe.adept.persist.sql.user=acesdbuser
com.adobe.adept.persist.sql.password=******
com.adobe.adept.serviceURL=http://127.0.0.1:8080/fulfillment
com.adobe.adept.fulfillment.security.licensesignURL=https://nasigningservice.adobe.com/licensesign
com.adobe.adept.fulfillment.security.keystore=pkcs12
com.adobe.adept.fulfillment.security.pkcs12.file=file:///C:/ACS4/operator.p12
com.adobe.adept.fulfillment.security.keystore.user=operator4acs
com.adobe.adept.fulfillment.security.keystore.password=******
Any Idea?
Regards,

Are you sure you created the .p12 file with the correct '-name' friendly name? The value for -name must match the value com.adobe.adept.fulfillment.security.keystore.user

I need to create public and private keys for security certificate and I can't find the certificate. Where is it?

I purchased a security certificate, and the site tells me that it was successfully installed. I need to export the certificate so that I can create the public and private keys, but I cannot find the certificate to do so.

Thank you.

Creating a single public key and multiple private keys

Hello,
I am new to java cryptography. The problem statement is :-
We have an accounting application, with flexibility of number of users and companies. The number of users and companies for this application has to be restricted based on the license the user has. That is the user will download our application via web while the user downloads he has to be given the key according to the license he has requested (i.e. single or multiple users/companies), I am unable to get the logic of private and public keys as such, y because which ever alogorithm i saw will generate a public and private key in pairs hence i am bit confused. Clearly, For ever additional user (or company) we r charging additional amount hence different license (keys) have to be generated dynamically for different users. I think this can be achived by creating one single public key and multiple private keys, but i am not sure . Please help me out.

Hi kazim
would u pls elaborate this , since i am working on same kind of scenario and finding solutions is difficult . Since encryption is done at our end and wen some user downloads an application he is unable to track where it was encrypted . What i have undestand about public /private is that they work in agreement between client and server and both has to come to agreement to share the data. Pls correct me if i am wrong.
Ours is different senario we will send some key in download application and will want him to decrypt it . What would u suggest for this kind of scenario?
Thanks in advance
Janesh

Private key

Hello people,
i'm creating a program that needs to generate private keys,
i've found out that java has built in libraries that support this so i've tried:
                KeyPairGenerator keyGen = KeyPairGenerator.getInstance("RSA");
                keyGen.initialize(1024);
                KeyPair keypair = keyGen.genKeyPair();
                PrivateKey privateKey = keypair.getPrivate();
                PublicKey publicKey = keypair.getPublic();but after i set the privateKey i can't find a way to retrieve the actual numbers used in the private key (probably to prevent attacks...)
eventually, all my app really needs, is a table of , lets say, 100 private keys (each one as 2 big primes)
is it possible for me to use the java.security to do that?
thanks for your time.

i still need small ones in the begining. a modolus in
the size of 16 DWORDS is too big for me right now, i
need something like 4.
i guess i have no escape but to generate them myself,
the problem is that i probably won't do it
professionaly :(Well - nobody will generate 32-bit RSA keys "professionally", because it'd take about 2 CPU minutes to break your keys when they're that small. 512 bits was acceptable in the eighties - current best-practice, IIRC, is 2048 bit keys for anything you're serious about protecting, and 4096-bit keys for anything you want to protect for extended periods of time.
Grant

Private Key Anomaly

Hi Gurus,
Here is situation, I finding it hard to solve. Any assistnace will be helpful.
SSL is a transport level security solution and hence is independent of any application level protocol (where a standard protocol like HHTP, LDAP or non-standard like t3s).
I started my SSL skills with keystores for Weblogic and used kestore formats like JKS and JCEKS. Given that in an enterprise setup we use more infrastructure softwares than just Weblogic. Now please assume a hypothetical scenario
OS :: Windows
App Server #1 :: Weblogic
App Server #2 :: Websphere
App Server #3 :: Tomcat
Web Server #1 :: IIS
Web Server #1 :: Apache
Web Server #1 :: iPlanet
Web Server #1 :: IHS
SSH Server on Windows (its possible and we use it)
(reason to mention this ridicilous number of softwares is highlight that they all use different type of keystores)
Now given that I want to protect these services at transport layer using SSL or TLS by using some valid x.509 certificate from a internal PKI suite and cerificate will be for the hostname.
Is there a way I can standardize on a common format for keystore and common format for private key. (Server Cert and CA cert is almost a non issue, having a .pem format is almost portable to any type of keystore).
I want to keep SSL/TLS certs as host resource and not dedicated to a particular software or keystore type...
There are some workarounds in the internet...seems like they are mostly around java application servers and sun keystore formats(JKS JCEKS) and some java code has to written to create your own utility...or somthing like pkeytool etc....
Suggestions guys..

PKCS#1 1.5 definition:
   RSAPrivateKey ::= SEQUENCE {
     version Version,
     modulus INTEGER, -- n
     publicExponent INTEGER, -- e
     privateExponent INTEGER, -- d
     prime1 INTEGER, -- p
     prime2 INTEGER, -- q
     exponent1 INTEGER, -- d mod (p-1)
     exponent2 INTEGER, -- d mod (q-1)
     coefficient INTEGER -- (inverse of q) mod p }RSAParameters as documented in .NET Framework Class Library:
D Represents the D parameter for the RSA algorithm.
DP Represents the DP parameter for the RSA algorithm.
DQ Represents the DQ parameter for the RSA algorithm.
Exponent Represents the Exponent parameter for the RSA algorithm.
InverseQ Represents the InverseQ parameter for the RSA algorithm.
Modulus Represents the Modulus parameter for the RSA algorithm.
P Represents the P parameter for the RSA algorithm.
Q Represents the Q parameter for the RSA algorithm. The KeySpec (CRT = Chinese Remainder Theorem)
RSAPrivateCrtKeySpec(BigInteger modulus,
BigInteger publicExponent,
BigInteger privateExponent,
BigInteger primeP,
BigInteger primeQ,
BigInteger primeExponentP,
BigInteger primeExponentQ,
BigInteger crtCoefficient)So we could try some guessing:
modulus <- Modulus
publicExponent <- Exponent
privateExponent <- D
primeP <- P
primeQ <- Q
primeExponentP <- DP
primeExponentQ <- DQ
crtCoefficient <- InverseQTry it and tell me if it worked. Good luck.

Private key from a file

dear all
I want to create rsa private key from .key file. I searched a lot but could not find a way to do so. how can i do that ???

'pem' stands for Privacy Enhanced Mail and defines an encoding to ASCII of binary data and not the format of the content of the file. Having said that, it looks to me that your file is a PEM encoded SSLeay format RSA key generated using OpenSSL and encrypted using the '-des3' option. Before loading into Java I normally convert, using OpenSSL, SSLeay files to a PKCS8 format private key and an X509 format public key certificate file. These are then easily loaded into Java.
The OpenSSL documentation will tell you how to generate the PKCS8 and X509 files but there are numerous sites that will hand-hold you through the commands. Google is your friend. Once you have generated these files then Google will also provide source code for loading them into Java.

Private key from RSAKeyValue

How to generate private key from <RSAKeyValue> generated by .net. in java? I got public/private key in following format.
<RSAKeyValue>
<Modulus>abcdyDdNySesa8sWsd8XRG9rFf1av
hch9BSG+sgCSYumLm5gzeTxrrpSqUf2VYfLp8USqK4uFBX312368wOEfK+C/viScPZn/hKcq
vFpd/gKyXJ0M6Oxybn7qJNjVjGtemQDJJdvUPNyV1bcTq0Ugw9lM2cDBVzqHjxxzzACJnab=
</Modulus>
<Exponent>AQAB</Exponent>
<P>/UTBBgeTREzfbV9ev1tKwGtFovxi9BiK5
crZ3Qns3rt+lrd6Xas6tJhAvedGakGP7eeaLHdXZjeXGnqvKzRHw==</P>
<Q>8FBLHPccdNh//dRF7Uf6weB829bz+G+NvVrKJMcOzUr9QuKcyRqfZTslKiC/aG9p1PoFxWpeyoPFwDrqFzTYhw==</Q>
<DP>MTvTPU3fnscdFbb3MaG4gzuArbgQNFc722pkgoakfOS9RQgf/VjKXoFllz7
05d+z6SHvSGemnEcYtNcbscPt4Q==</DP>
<DQ>0NOVUihSbB8uqe8sVZ11BEEFfyw9eafGrc
NVYbww2qjNh+/QetlNpfRNiVxHuIMInnBdz31tveHgV/laLqyDxQ==</DQ>
<InverseQ>X0KxLXzW2glIhkk5lP0OnQVWfTutwo9Qg4DSk/5MtbQMMek8SHju7X9Ae2iL4DDRbWG/5mbrPdQ1yQg+GXCWbw==</InverseQ>
<D>NCBukE3dm5+xRXEY4qWk3Xe8XFvIHT5vENOzTZE4jz0aBPxzTYLIgbkZP+lXgllc4mricqYSsD3K8vCBMQXEhqHkc6pSiYfesZG3wlujJGRyVoT1pVk5M460RwJfwPsO0TxfYCYU80CIfZNzFIEpGEp6pAUF1TQbnTre11aFjU=</D>
</RSAKeyValue>
I was able to generate public key as below.
BigInteger publicExponent = new BigInteger(new sun.misc.BASE64Decoder().decodeBuffer("AQAB"));
RSAPublicKeySpec rsaPublicKeySpec = new RSAPublicKeySpec(modulus,publicExponent);
But privateKey need privateExponent
RSAPrivateKeySpec rsaPrivateKeySpec = new RSAPrivateKeySpec(modulus,privateExponent);
How to get privateExponent from <RSAKeyValue> ?
RSAPrivateCrtKeySpec need following parameters. Can not find where it map in <RSAKeyValue>
RSAPrivateCrtKeySpec(BigInteger modulus,
BigInteger publicExponent,
BigInteger privateExponent,
BigInteger primeP,
BigInteger primeQ,
BigInteger primeExponentP,
BigInteger primeExponentQ,
BigInteger crtCoefficient)
Thanks,
DP

PKCS#1 1.5 definition:
   RSAPrivateKey ::= SEQUENCE {
     version Version,
     modulus INTEGER, -- n
     publicExponent INTEGER, -- e
     privateExponent INTEGER, -- d
     prime1 INTEGER, -- p
     prime2 INTEGER, -- q
     exponent1 INTEGER, -- d mod (p-1)
     exponent2 INTEGER, -- d mod (q-1)
     coefficient INTEGER -- (inverse of q) mod p }RSAParameters as documented in .NET Framework Class Library:
D Represents the D parameter for the RSA algorithm.
DP Represents the DP parameter for the RSA algorithm.
DQ Represents the DQ parameter for the RSA algorithm.
Exponent Represents the Exponent parameter for the RSA algorithm.
InverseQ Represents the InverseQ parameter for the RSA algorithm.
Modulus Represents the Modulus parameter for the RSA algorithm.
P Represents the P parameter for the RSA algorithm.
Q Represents the Q parameter for the RSA algorithm. The KeySpec (CRT = Chinese Remainder Theorem)
RSAPrivateCrtKeySpec(BigInteger modulus,
BigInteger publicExponent,
BigInteger privateExponent,
BigInteger primeP,
BigInteger primeQ,
BigInteger primeExponentP,
BigInteger primeExponentQ,
BigInteger crtCoefficient)So we could try some guessing:
modulus <- Modulus
publicExponent <- Exponent
privateExponent <- D
primeP <- P
primeQ <- Q
primeExponentP <- DP
primeExponentQ <- DQ
crtCoefficient <- InverseQTry it and tell me if it worked. Good luck.

Private Key Created

A private Key in my user name was created without my knowledge that expired after one month. It is in my keychain as a Root Certification in the System Keychain. I checked all of the Console Logs and could not find any mention at the date and time of its creation. Concerned about Malware, I also checked emails from that date and ran ClamXAV -nothing suspicious. I have Googled the issue thinking that someone else has noted this-no luck.
I hope it was not Hacker activity. I checked another Mac in the house and there is no similar Certificate. MacPro OS 10.8.5
Any Ideas?
Thanks

use openssl to convert your private key into a pkcs#12 format file. keytool should able to treat this file as a keystore. Then run keytool -importkeystore, specifying the pkcs#12 file as the source keystore.

WBL 7.0 and SSL private key problem

Having generated certificate request, and associated private key, I obtained
the corresponding server level certificate. I am having problems starting the
server with the cert. I have configured my server appropriately, here is the SSL
configuration from the domain config.xml
<SSL Enabled="true" HostnameVerificationIgnored="true"
ListenPort="8090" Name="SampleServer"
ServerCertificateChainFileName="nasaca.pem"
ServerCertificateFileName="mydomain-cert.pem"
ServerKeyFileName="mydomain-key.pem"/>
and I am using -Dweblogic.management.pkpassword=mypassword
in the startup script, however I get :
java.lang.Exception: Cannot read private key from file /usr/user_projects/Sample/mydomain-key.pem.
Make sure password specified in environment property weblogic.management.pkpassword
is valid.
I have given the right password. So the question is why am I seeing the error
I am running this server on Sun Solaris. The password contains the usual ascii
characters, including shell special characters.
Any way checking the private key file ?
Also as we have seen problems with the particular certificate we get from the
CA, I wanted to use "utils.ValidateCertChain", alas this documented utility is
conveniently missing from weblogic.jar. Oh big blue, why didn't we go with you
Seriously, please help
Tarang

Darkit,
I have the same problem. Let me know if you find a solution to this problem.
Thanks,
Bharathi

Having multiple CAs share the same private key

We are developing a system which implements an HA cluster across two separate geographical locations.
Each site will have several Windows Server 2012 machines and at least one DC, and we basically have to do a master-master replication between the two sites.
The entire system will be under a single domain.
We will be deploying AD CS since some of our sub-systems need certificates,
but we want to limit the variety certificate to just one (i.e. we want all CAs to issue identical certificates).
To do that, we have to setup AD CS so that all the DCs (both intra-site and inter-site) share the same private key.
Is it possible to have all DCs in a domain to share a single private key?
This article on TechNet suggests that we can do it within a cluster,
https://technet.microsoft.com/en-us/library/cc742450%28v=ws.10%29.aspx
but we are not sure if we can do it across different sites.
Any advice and comments are highly appreciated.
Wanko

Hi Wanko,
Its not much clear what you mean by "DCs to have single private key".
However as per the article it indicates that you can use the same (SAN) certificate on both servers (nodes) of the cluster, the certificate SN will be the common clustername.
This is common when you are using clustering or load-balanced system which requires you to have a common name, but individual nodes.
Basically if you want to use single private key for the HA nodes, use the same certificate across all the nodes, that would be generated on the first node(generally). You don't need to issue identical certificates(this will not work as per my understanding)
CA First Node: Export the Cert
On the Welcome page of the CA Backup Wizard, click Next. Select
Private key and CA certificate, and provide a directory name where you want to temporarily store the CA certificate and optionally the key. Click
Next.
Provide a password to protect the CA key, click Next, and then click
Finish.
CA Second Node: Import the Cert
Open the Certificates snap-in for the computer account.
In the console tree, double-click Certificates (Local Computer), and click
Personal.
On the Action menu, click All Tasks, and then click
Import to open the Certificate Import Wizard. Click Next.
Enter the file name of the CA certificate that was previously created on the first node, and click
Next. If you click Browse to find the certificate, change the file type to
Personal Information Exchange (*.pfx,*.p12).
Type the password that you have previously used to protect the private key. The password is required even if there is no private key in the .pfx file. Do not mark this key as exportable. Click
Next.
Place the certificate in the Personal certificate store, and click
Next. To complete the certificate import process, click
Finish, and then click OK.
Secondly I don't get what do you mean by: "we basically have to do a master-master replication between the two sites."
Please note a Cluster can only run a single instance of Certificate Services. A failover cluster of any size can be used to provide a high availability environment for certificate services. However, Microsoft does not support more than one instance
of certificate services on a cluster.
References:
Overview of CA Clustering-2003
Active Directory Certificate Services (AD CS) Clustering - Requirements-2012
Regards,
Satyajit
Please“Vote As Helpful”
if you find my contribution useful or “MarkAs Answer” if it does answer your question. That will encourage me - and others - to take time out to help you.

AZURE The specified certificate could not be found in the LocalMachine certificate store,or the certificate does not have a private key.

Hello,
I try to make a HV website in Azure. It took me hours to figure out how to make a HV certificate with my own password. But I figured it out. With the HV application manager I uploaded the certificate to the HV platform. This worked fine. Then I created a
c# project with also works well on my local machine.
This is the code I use in the web.config
<appSettings>
<add key="ApplicationId" value="24ee15be-1497-4719-ad70-d1223adbf021" />
<add key="ShellUrl" value="https://account.healthvault-ppe.co.uk/" />
<add key="HealthServiceUrl" value="https://platform.healthvault-ppe.com/platform/" />

<add key="NonProductionActionUrlRedirectOverride" value="Redirect.aspx" />

<add key="WCPage_ActionHome" value="default.aspx" />
<add key="WCPage_ActionAppAuthSuccess" value="default.aspx" />
<add key="WCPage_ActionSignOut" value="SignedOut.aspx" />
</appSettings>
Next step is to deploy the site to Azure. I was able to upload the certicate to Azure.
After deploy I get the following error:
System.Security.SecurityException: The specified certificate, CN=WildcatApp-24ee15be-1497-4719-ad70-d1223adbf021, could not be found
in the LocalMachine certificate store,or the certificate does not have a private key.
I checked the certificate on another server with a different key in the web.config
<add key="ApplicationCertificateFileName" value="c:\Zodos\website\WildcatApp-24ee15be-1497-4719-ad70-d1223adbf021.pfx"/>
This gives me this error:
Exception Details: System.Security.Cryptography.CryptographicException: The specified network password is
not correct.
So the procedure I followed definitely was not correct:
It works on my local machine
It doesn't work on another server or on Azure
I can see that the procedure I follow is not correct, but what am I doing wrong?
Wilfred

I am having the same problem. I see I have updates thru the Mac App Store but when I try and run the System updates in the Mac App Store it errors out. But I can update third party apps.
Have even tried going thru Terminal to check for software updates but still have same error claiming it can not find the hostname server.
Jefre

Finding License Private key

Similar Messages

Maybe you are looking for