Техническая Инструкция для Cisco Cisco ASA for Nexus 1000V Series Switch

ASA 7.x Manually Install 3rd Party Vendor
Certificates for use with WebVPN Configuration
Example

Document ID: 97856

Contents

Introduction
Prerequisites
Requirements
Components Used
Conventions
Configure
Step 1. Verify that the Date, Time, and Time Zone Values are Accurate
Step 2. Generate the RSA Key Pair
Step 3. Create the Trustpoint
Step 4. Generate the Certificate Enrollment
Step 5. Authenticate the Trustpoint
Step 6. Install the Certificate
Step 7. Configure WebVPN to Use the Newly Installed Certificate
Verify
Replace Self−Signed Certificate from ASA
View Installed Certificates
Verify Installed Certificate for WebVPN with a Web Browser
Steps To Renew the SSL Certificate
Commands
Troubleshoot
Related Information

Introduction

This configuration example describes how to manually install a 3rd party vendor digital certificate on the
ASA for use with WebVPN. A Verisign Trial Certificate is used in this example. Each step contains the
ASDM application procedure and a CLI example.

Prerequisites

Requirements

This document requires that you have access to a certificate authority (CA) for certificate enrollment.
Supported 3rd party CA vendors are Baltimore, Cisco, Entrust, iPlanet/Netscape, Microsoft, RSA, and
VeriSign.

Components Used

This document uses an ASA 5510 that runs software version 7.2(1) and ASDM version 5.2(1). However, the
procedures in this document work on any ASA appliance that runs 7.x with any compatible ASDM version.