Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Use a signed certificate when you cannot exchange self-signed certificates between the Email Security 
appliance and the other machine, for example because that machine is not in your domain. Your 
corporate security department may have other requirements. 

You can generally use self-signed certificates for communications between appliances that are behind 
your corporate firewall. Your corporate security department may have other requirements. 

If you are deploying in a cluster, follow 
instructions. 

Generate a self-signed certificate and 
Certificate Signing Request (CSR). 

Send the generated certificate to a 
recognized Certificate Authority for 
signing. 

Upload the signed certificate. 

Ensure that the certificate authority that 
signed the certificate is on the list of 
trusted authorities. 

If applicable, use an intermediate 
certificate. 

If you are deploying in a cluster, 
follow instructions. 

Generate a self-signed certificate 
from the Email Security appliance. 

Export the self-signed certificate. 

Import the self-signed certificate to 
the machine with which the Email 
Security appliance will 
communicate. 

See the documentation for the other machine. 

Generate and export a self-signed 
certificate from the other machine. 

See the documentation for the other machine. 

Import the self-signed certificate 
from the other machine into the 
Email Security appliance. 

or 

See the chapter in this guide for configuring communication with 
that machine.