Ask a Question

Solution ID : SO21494

Certificate Signing Request (CSR) Generation Instructions for Cisco ASA 5510

Solution


This document uses an ASA 5510 that runs software version 8.0(2) and ASDM version 6.0(2) and provides instructions for generating a Certificate Signing Request (CSR) for Cisco ASA 5510. If this document can not be used within the environment, RapidSSL recommends contacting Cisco.
 

Step 1:  Generate a key pair

  1. Within ASDM, click Configuration > Device Management
  2. Click Certificate Management > Identity Certificates > Add > Add a new identity certificate
  3. Click New > Enter new key pair name
  4. Enter a unique key pair name for the certificate
  5. Select the key size of at least 2048
  6. Click Generate Now


Step 2: Generate a certificate signing request (CSR) file

  1. To enter certificate information, click Select
  2. From the drop-down list select the following attributes > Enter Value > click Add
  3. The following fields are required: 

    - Country Name (C): Use the two-letter code without punctuation for country, for example: US
    - State or Province (S): Spell out the state completely; do not abbreviate the state or province name, for example: Oregon
    - Locality or City (L): The Locality field is the city or town name, for example: Eugene
    - Organization (O): If your company or department has an &, @, or any other symbol using the shift key in its name, you must spell out the symbol or omit it to enroll, for example: XY & Z Corporation would be XYZ Corportation or XY and Z Corportation.
    - Organizational Unit (OU): This field is the name of the department or organization unit making the request.
    - Common Name (CN): The Common Name is the Host + Domain Name.  For example, www.bbtest.net
     
  4. Once the appropriate values are added, click OK > Advanced
  5. In the FQDN field, enter the FQDN that will be used to access the device from the Internet:
  6. Click OK Add Certificate > Browse
  7. Choose a location where to save the request file
  8. Proceed with Enrolment.


Once the SSL certificate has been issued, refer to this link for installation instructions.