Cloud Managed Networks

 View Only

  • 1.  Unable to move Switch to Central due to EST Enrollment Fail

    Posted Sep 04, 2025 07:08 AM

    Hi, tried to move one of our 2530 Switches running 16.11.0026 to Central, but the log throws me this error:

    activate: EST enrollment with server failed because of PKCS7 extraction failed for client certificate.

    what certificate issue is it having and how do i fix it? its the first 2530 I try to add, but after other Posts here (and learning that the 2530 Switches need to be manually whitelisted by TAC, which already has, or should have, happened) I'm unsure whats causing this error.



    -------------------------------------------


  • 2.  RE: Unable to move Switch to Central due to EST Enrollment Fail
    Best Answer

    Posted Sep 05, 2025 02:04 AM

    2530 switches do not have TPM and hence the cert error. Please work with TAC to resolve this.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 3.  RE: Unable to move Switch to Central due to EST Enrollment Fail

    Posted Sep 10, 2025 03:13 AM

    Update: Ticket with TAC resolved in, the 2530 Switch unable to connect due to an internal Server issue with Aruba. The internal Server issue has been resolved from their side and the Switch connected without any further problems.

    -------------------------------------------



Related Content