Installing your SSL: Cisco ASA

To install your SSL certificate, you will need to do the following:

Installing your SSL Certificate in the Adaptive Security Device Manager (ASDM)

1

You will receive your SSL certificate and intermediate certificate by email. Copy each certificate from the email, paste each one into a separate text editor and save the files to a safe location with an extension of .crt, such as gs_sslcertificate.crt and gs_intermediate.crt.

2

In ASDM select Configuration and then Device Management.

3

Expand Certificate Management and select CA Certificates and then Add.

4

With the option selected to Install from a file, browse to the gs_intermediate.crt file and then click the Install Certificate button at the bottom of the Install Certificate window.

Your Intermediate certificate file is now installed. You will now need to install the gs_sslcertificate.crt file.

5

In ASDM select Configuration and then Device Management.

6

Expand Certificate Management and select Identity Certificates.

7

Select the appropriate identity certificate from when your CSR was generated (the Issued By field should show as not available and the Expiry Date field will show Pending...). Click the Install button.

8

Browse to the appropriate identity certificate (the gs_sslcertificate.crt) and click Install Certificate.

At this point you should receive confirmation that the certificate installation was successful.

Configuring WebVPN with ASDM to Use the New SSL Certificate

1

In ASDM select Configuration and then Device Management.

2

Click Advanced and then SSL Settings.

3

From Certificates, choose the interface used to terminate WebVPN sessions, and then choose Edit.

4

From the Certificate drop-down, select the newly installed certificate, then OK, and then Apply.

Configuring your certificate for use with the selected kind of WebVPN session is now complete.

SSL Certificate Installation from the Cisco ASA command line (alternate installation method)

1

From the ciscoasa(config)# line, enter the following text:

crypto ca authenticate my.cert.trustpoint

Where my.cert.trustpoint is the name of trustpoint created when your certificate request was generated.

2

Next, enter the entire body of the gs_intermediate.crt file followed by the word quit on a line by itself (the gs_intermediate.crt file can be opened and edited with a standard text editor, and the entire body of that file should be entered when prompted).

3

When asked to accept the certificate, enter yes.

4

When the certificate has been successfully imported, enter exit.

Your Intermediate certificate file is now installed. You will now need to install the gs_sslcertificate.crt file.

5

From the ciscoasa(config)# line, enter the following text:

crypto ca import my.cert.trustpoint certificate

Where my.cert.trustpoint is the name of trustpoint created when your certificate request was generated.

6

Next, enter the entire body of the gs_sslcertificate.crt file followed by the word quit on a line by itself (the gs_sslcertificate.crt file can be opened and edited with a standard text editor, and the entire body of that file should be entered when prompted).

You should then receive a message that the certificate was successfully imported.

Configuring WebVPN to Use the New SSL Certificate from the Cisco ASA command line

From the ciscoasa(config)# line, enter the following text:

ssl trust-point my.cert.trustpoint outside

wr mem

Where my.cert.trustpoint is the name of trustpoint created when your certificate request was generated and "outside" is the name of the interface being configured.

Make sure you save the configuration.

Offer

Answer options

Your feedback was successfully added.

Answer tracking

Track

Watch the content of this article for changes.