topic Re: firepower management center: how to switch from self signed certificate to a ca based certificate? in Network Security

firepower management center: how to switch from self signed certificate to a ca based certificate?

bschmidtde — Sat, 22 Feb 2020 07:35:03 GMT

Hi,

i need help to switch from the self signed certificate to a new microsoft based ca certificate.
I can generate a new CSR and my ca built a new certificate, i copy this and the root ca certificate in to the import https Server certificate dialog and fire it up. But after this nothing happend. And the self signed certifcate is still used. The online help is no help.

Where can i check what is going wrong ?

Thanks for your help

Cisco Firepower Management Center for VMWare
Software Version 6.2.2.1

Re: firepower management center: how to switch from self signed certificate to a ca based certificate?

Rob Ingram — Mon, 15 Jan 2018 18:43:50 GMT

Hi, I assume you mean a certificate for the FMC Mgmt webpage? If so, try this:-

// Create a CSR - Go to > System > Local > Configuration > HTTPS Certificate > Generate New CSR
// Get the certificate signed by the Internal CA
// Import the signed certificate - Go to System > Local > Configuration > HTTPS Certificate > Import HTTPS Certificate
// Click Save

Re: firepower management center: how to switch from self signed certificate to a ca based certificate?

bschmidtde — Tue, 16 Jan 2018 10:21:58 GMT

Yes that´s it. But nothing happend after i copy the certificate for the this and the root certificate from the ca. The built in self signed certificate stay active. No Message after i click save.

Re: firepower management center: how to switch from self signed certificate to a ca based certificate?

Rob Ingram — Tue, 16 Jan 2018 12:18:24 GMT

I just tried this in my lab, it seems when I use Internet Explorer it doesn't seem to apply the certificate correctly, however using firefox does work. Perhaps try a different web browser if it does nothing when it saves.

Re: firepower management center: how to switch from self signed certificate to a ca based certificate?

bschmidtde — Tue, 16 Jan 2018 14:37:54 GMT

thanks for the idea but chrome, firefox and edge = all the same nothing is changing. After i save it nothing happend, no message and still the selfsigned certificate is in use.

any other ideas?

Re: firepower management center: how to switch from self signed certificate to a ca based certificate?

Daniel Lucas — Wed, 14 Mar 2018 13:44:39 GMT

Any resolution for this? Having the same issue - I can generate the CSR, but there doesn't appear to be a way to import the signed cert. The 'Import HTTPS Server Certificate' doesn't seem to be related to the CSR since it asks for an optional private key - makes me think this is for import a wildcard cert.

Re: firepower management center: how to switch from self signed certificate to a ca based certificate?

c-kn — Thu, 26 Apr 2018 18:32:10 GMT

I have the same issue with the same software version. I already had a CA cert uploaded to my FMC and working. When I showed up last week it was using a self signed cert from Cisco again. When I try to load my previous CA cert that I had working before. No messages or anything after I click save.