- From the ciscoasa(config)# line, enter the following text:
crypto ca authenticate my.xyz.trustpoint
Where my.xyz.trustpoint is the name of trustpoint created when your certificate request was generated. - Next, enter the entire body of the xyzRSAAddTrustCA.crt file followed by the word “quit” on a line by itself (the xyzRSAAddTrustCA.crt file can be opened and edited with a standard text editor, and the entire body of that file should be entered when prompted).
Note: Since there are 2 intermediates provided you will have to do this step again for the additional intermediate “xyzRSADomain/Organization/EVvalidationSecureServerCA.crt”
- When asked to accept the certificate, enter “yes”.
- When the certificate has been successfully imported, enter “exit”.Your Intermediate (or chain) certificate file is now installed. You will now need to install the your_domainname_com.crt file.
- From the ciscoasa(config)# line, enter the following text:
crypto ca import my.xyz.trustpoint certificate
Where my.xyz.trustpoint is the name of trustpoint created when your certificate request was generated. - Next, enter the entire body of the your_domainname_com.crt file followed by the word “quit” on a line by itself (the your_domainname_com.crt file can be opened and edited with a standard text editor, and the entire body of that file should be entered when prompted).You should then receive a message that the certificate was successfully imported.
Configuring WebVPN to Use the New SSL Certificate from the Cisco ASA command line
- From the ciscoasa(config)# line, enter the following text:
ssl trust-point my.xyz.trustpoint outside
wr mem
Where my.xyz.trustpoint is the name of trustpoint created when your certificate request was generated and “outside” is the name of the interface being configured.Make sure to save the configuration.
Leave A Comment?