topic Two Solution Engines Sharing a single, common Self Signed Cert in Network Access Control

Two Solution Engines Sharing a single, common Self Signed Cert

stephenwa — Sun, 10 Mar 2019 22:53:50 GMT

Does anyone know if it possible to have 2 solution Engines sharing a single, common self signed certificate generated by one of the Solution Engines? I have a certificate, actually two, that are about to expire. I am trying simplify the distribution and management by having just one certificate.

Re: Two Solution Engines Sharing a single, common Self Signed Ce

Farrukh Haroon — Mon, 09 Jun 2008 19:04:32 GMT

This is the process to share SSL certs:

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=AAA&topicID=.ee6e1fe&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc0c933

But why do you want to do this anyway? They are self-signed certs anyway, you can generate them for as long as you like. Are you using it for some sort of end-user security like Wireless Encryption, NAC etc.?

Regards

Farrukh

Re: Two Solution Engines Sharing a single, common Self Signed Ce

Jagdeep Gambhir — Mon, 09 Jun 2008 19:11:48 GMT

Yes, that is possible. If you have the cert and pvk file you can upload it to any appliance.

You need to remember private key file as you need to retype it at the time of uploading it.

Regards,

~JG

Do rate helpful posts

Re: Two Solution Engines Sharing a single, common Self Signed Ce

stephenwa — Thu, 12 Jun 2008 16:04:52 GMT

The ACS generated Self Signed Certs are only valid for 1 year. As far as I know there is no way of generating one to last beyond a year unlike a cert obtained from a CA.

We are using the certs for WiFi PEAP clients.