Problem

How do I install an SSL certificate onto Cisco ASA 7.x?

Solution

Part I - Authenticating the Trustpoint

Please make sure that the certificate file you receive from QuoVadis is in PEM (or base

1. Save the SSL certificate file to your local computer.


2. Open the file with a text editor, such as Notepad.


3. Keeping the certificate in the text editor open, start the Cisco ASDM.  Within ASDM, click Configuration, and then click Properties.


4. Expand Certificate, and choose Authentication.


5. Click the Enter the certificate text in hexadecimal or base64 format radio button.


6. Paste the base64-formatted CA Certificate from your text editor into the text area.


7. Click on Authenticate.


8. Click on OK.

Part II - Installing the Certificate

1. Back in the Cisco ASDM, click Configuration, and then click Properties.


2. Expand Certificate, and then choose Import Certificate.


3. Click the Enter the certificate text in hexadecimal or base64 format radio button, and paste the base64 identity certificate into the text field.


4. Click Import, and then click OK.

Part III - Configuring WebVPN to Use the Certificate

1. Click Configuration, click Properties, and then choose SSL.


2. In the Trustpoints area, select the interface that will be used to terminate WebVPN sessions. (This example uses the outside interface.)


3. Click Edit.

The Edit SSL Trustpoint dialog box appears.


4. From the Enrolled Trustpoint drop-down list, choose the trustpoint you created during the CSR creation process.


5. Click OK, and then click Apply.