Cisco Cisco Email Security Appliance X1070 Guía Del Usuario
Chapter 2 Customizing Listeners
2-56
Cisco IronPort AsyncOS 7.3 for Email Advanced Configuration Guide
OL-23081-01
Figure 2-13
View Certificate Page
Enter a name for the certificate. AsyncOS assigns the common name by default.
If you want to submit a CSR for the self-signed certificate to a certificate
authority, click Download Certificate Signing Request to save the CSR in PEM
format to a local or network machine. Click Submit to save the certificate and
commit your changes.
authority, click Download Certificate Signing Request to save the CSR in PEM
format to a local or network machine. Click Submit to save the certificate and
commit your changes.
When the certificate authority returns the trusted public certificate signed by a
private key, upload it by clicking on the certificate’s name on the Certificates page
and entering the path to the file on your local machine or network. Make sure that
the trusted public certificate that you receive is in PEM format or a format that
you can convert to PEM using before uploading to the appliance. (Tools for doing
this are included with OpenSSL, free software from http://www.openssl.org.)
private key, upload it by clicking on the certificate’s name on the Certificates page
and entering the path to the file on your local machine or network. Make sure that
the trusted public certificate that you receive is in PEM format or a format that
you can convert to PEM using before uploading to the appliance. (Tools for doing
this are included with OpenSSL, free software from http://www.openssl.org.)
Uploading the certificate from the certificate authority overwrites the existing
certificate. You can also upload an intermediate certficate related to the
self-signed certificate. You can use the certificate with a public or private listener,
an IP interface’s HTTPS services, the LDAP interface, or all outgoing TLS
connections to destination domains.
certificate. You can also upload an intermediate certficate related to the
self-signed certificate. You can use the certificate with a public or private listener,
an IP interface’s HTTPS services, the LDAP interface, or all outgoing TLS
connections to destination domains.
Importing a Certificate
AsyncOS also allows you to import certificates saved in the PKCS #12 format to
use on your appliance. You can import the certificate either via the Network >
Certificates page in the GUI or the
use on your appliance. You can import the certificate either via the Network >
Certificates page in the GUI or the
certconfig
command in the CLI on a Email