42-6
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 42 Using the Cisco Unified Communication Wizard
Configuring the Mobility Advantage by using the Unified Communication Wizard
Step 1 In the ASA’s Identity Certificate area, click Generate and Export ASA’s Identity Certificate.
An information dialog boxes appear indicating that the enrollment seceded. In the Enrollment Status
dialog box, click OK. The Export certificate dialog box appears.
Note • If an identity certificate for the adaptive security appliance has already been created, the button in
this area appears as Export ASA’s Identity Certificate and the Export certificate dialog box
immediately appears.
• When using the wizard to configure the Cisco Mobility Advantage proxy, the wizard only supports
installing self-signed certificates.
Step 2 Export the identity certificate generated by the wizard for the adaptive security appliance. See Exporting
an Identity Certificate, page 42-17.
Step 3 In the Unified MA Server’s Certificate area, click Install Unified MA Server’s Certificate. The Install
Certificate dialog appears.
Step 4 Locate the file containing the Cisco Mobility Advantage server certificate or paste the certificate details
in the dialog box. See Installing a Certificate, page 42-18.
Step 5 Click Next.
Note See the Cisco Mobility Advantage server documentation for information on how to export the certificate
for this server.
Configuring the Client-Side Certificates for the Cisco Mobility Advantage Proxy
To establish a trust relationship between the Cisco Unified Mobile Communicator (UMC) clients and the
adaptive security appliance, the adaptive security appliance uses a CA-signed certificate that is
configured with the Cisco Mobility Advantage server’s FQDN (also referred to as certificate
impersonation).
In the Client-Side Certificate Management page, you enter both the intermediate CA certificate (if
applicable, as in the cases of Verisign) and the signed adaptive security appliance identity certificate.
Note If the adaptive security appliance already has a signed identity certificate, you can skip Step 1 in this
procedure and proceed directly to Step 2.
Step 1 In the ASA’s Identity Certificate area, click Generate CSR. The CSR parameters dialog box appears.
For information about specifying additional parameters for the certificate signing request (CSR), see
Generating a Certificate Signing Request (CSR) for a Unified Communications Proxy, page 42-18.
Information dialog boxes appear indicating that the wizard is delivering the settings to the adaptive
security appliance and retrieving the certificate key pair information. The Identity Certificate Request
dialog box appears.