How to recover from "Error: The private key could not be parsed" when trying to upload the RSA SecurID Access Identity Router (IDR) SSL private key
2 years ago
Originally Published: 2016-09-09
Article Number
000043126
Applies To
RSA Product Set:  SecurID Access
Issue
When uploading your SSL private key through the Administration Console (My Account > Company Settings > Company Information), as described in the RSA SecurID Access documentation on how to Configure Company Settings and Certificates, the following error displays:
 
Error: The private key could not be parsed

User-added image

 
 
 
Cause
The private key was encrypted by a password/passphrase when created.
Resolution
The IDR requires that the private key be uploaded without password protection. 
You can create a temporary un-encrypted version of the protected private key using the openssl toolkit: 
# openssl rsa -in <private_encrypted>.key -out <private_unencrypted>.key
Enter pass phrase for <private_encrypted>.key:
writing RSA key
After uploading the un-encrypted key via the Administration Console, it should then be deleted from your local system. 


 
Notes
You can check if a key has been password protected:

Unprotected Case

openssl rsa -text -noout -in <private_unencrypted>.key
Private-Key: (1024 bit)
modulus:
    00:d0:7f:ee:7b:50:ba:76:42:35:df:5e:d2:95:ef:
    d8:32:fe:38:ec:08:28:c6:7b:03:3c:21:ba:4b:a9:

Note that you are not prompted for a pass phrase.

Protected Case

openssl rsa -text -noout -in <private_encrypted>.key
Enter pass phrase for <private_encrypted>.key:

Note that you are prompted for a passphrase.
 

Related Articles

Trending Articles

Don't see what you're looking for?