Cisco Cisco Clean Access 3.5

In the SSL Certificate page, perform one of the following procedures, depending on whether you 
intend to use a temporary, self-signed certificate or a CA-signed certificate: 

Complete the Generate Temporary Certificate form and click Generate. The certificate must 
be associated with the Service IP addresses of the HA pair. 

When finished generating the temporary certificate, choose Export Certificate Request from 
the Choose an action menu. 

Click the Export Private Key button. You must import this key file later when configuring the 
standby CAS. 

Choose Import Certificate from the Choose an action menu 

Use the Browse button next to the Certificate File field and navigate to the certificate file. 

Click Import CA-Signed Certificate to import the certificate. Note that you will need to import 
the same certificate later to the standby CAS. 

Choose Export Certificate Request from the Choose an action list.

Click the Export Private Key button. You must import this key later when configuring the 
standby CAS. 

The CA-signed certificate must either be based on the Service IP or a host name/domain name resolvable 
to the Service IP through DNS.