Cisco Cisco Email Security Appliance X1070 Troubleshooting Guide

Page of 2
ESA Certificate Installation Requirements
Document ID: 118923
Contributed by Jai Gill and Robert Sherwin, Cisco TAC Engineers.
Apr 23, 2015
Contents
Introduction
Prerequisites
     Requirements
     Components Used
ESA Certificate Installation Requirements
ESA Services that Require Certificates
Introduction
This document describes the certificate installation requirements for the Cisco Email Security Appliance
(ESA) and the services for which the certificates can be used.
Prerequisites
Requirements
Cisco recommends that you have knowledge of these topics:
Cisco ESA
• 
AsyncOS
• 
Components Used
The information in this document is based on the Cisco ESA that runs any version of AsyncOS.
The information in this document was created from the devices in a specific lab environment. All of the
devices used in this document started with a cleared (default) configuration. If your network is live, make sure
that you understand the potential impact of any command.
ESA Certificate Installation Requirements
You must have these items available in Privacy Enhanced Mail (PEM) format in order to install a certificate
on the ESA:
The X.509 certificate
• 
The private key that matches your certificate
• 
Any intermediate certificates that are provided by your Certificate Authority (CA)
• 
ESA Services that Require Certificates
Certificates can be used for these four services: