Cisco Cisco Firepower Management Center 4000

51-5

FireSIGHT System User Guide

Chapter 51 Configuring Appliance Settings

Using Custom HTTPS Certificates

Step 3

Click

Generate New CSR

The Generate Certificate Signing Request pop-up window appears.

Step 4

Type the two-letter country code for your country into the

Country Name (two-letter code)

field.

Step 5

Type the postal abbreviation for your state or province in the

State or Province

field.

Step 6

Type the name of your

Locality or City

Step 7

Type your

Organization

name.

Step 8

Type an

Organizational Unit (Department)

name.

Step 9

Type the fully qualified domain name of the server for which you want to request a certificate in the

Common Name

field, exactly as you want it to appear in the certificate.

Step 10

Click

Generate

The Certificate Signing Request pop-up window appears.

Step 11

Open a text editor.

Step 12

Copy the entire block of text in the certificate request, including the

BEGIN CERTIFICATE REQUEST

and

END CERTIFICATE REQUEST

lines, and paste it into a blank text file.

Step 13

Save the file as

servername.csr

, where

servername

is the name of the server where you plan to use the

certificate.

Step 14

Upload the CSR file to the certificate authority where you want to request a certificate or use the CSR
to create a self-signed certificate.

Uploading Server Certificates

License:

Any

After you have a signed certificate from a certificate authority (CA), you can upload it. If the signing
authority that generated the certificate requires you to trust an intermediate CA, you must also supply a
certificate chain, sometimes referred to as a certificate path. If you require user certificates, they must
be generated by a certificate authority whose intermediate authority is included in the certificate chain.

To upload a certificate:

Access:

Admin

Step 1

Select

System > Local > Configuration

The Information page appears.

Step 2

Click

HTTPS Certificate

The HTTPS Certificate page appears.

Step 3

Click

Import HTTPS Certificate

The Import HTTPS Certificate pop-up window appears.

Step 4

Open the server certificate in a text editor, copy the entire block of text, including the

BEGIN

CERTIFICATE

and

END CERTIFICATE

lines, and paste it into the

Server Certificate

field.

Step 5

Optionally, open the private key file, copy the entire block of text, including the

BEGIN RSA PRIVATE KEY

and

END RSA PRIVATE KEY

lines, and paste it into the

Private Key

field.