35-7
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 35 Configuring Digital Certificates
Information About Digital Certificates
Figure 35-1 The Local CA
Supported CA Servers
The adaptive security appliance supports the following CA servers:
• Cisco IOS CS
• Baltimore Technologies
• Entrust
• Microsoft Certificate Services
• Netscape CMS
• RSA Keon
• Ve riS ig n
Certificate Enrollment
The adaptive security appliance needs a CA certificate for each trustpoint and one or two certificates for
itself, depending upon the configuration of the keys used by the trustpoint. If the trustpoint uses separate
RSA keys for signing and encryption, the adaptive security appliance needs two certificates, one for each
purpose. In other key configurations, only one certificate is needed.
The adaptive security appliance supports enrollment with SCEP and with manual enrollment, which lets
you paste a base-64-encoded certificate directly into the terminal. For site-to-site VPNs, you must enroll
each adaptive security appliance. For remote access VPNs, you must enroll each adaptive security
appliance and each remote access VPN client.
User Enrollment Webpage
for PKCS12 Users Certificate
Enrollment and Retrieval
HTTP CRL retrieval
ASDM and CLI
configuration and
management
Local Database in flash memory
or Mounted external file system
(CIFS or FTP)
Security Device
with Local CA
Configured
191783
To Next Page
Loading...
Need help?
General
