topic Re: ASA - how to cancel a crypto ca enroll in Network Security

ASA - how to cancel a crypto ca enroll

kbyrd — Tue, 12 Mar 2019 03:50:54 GMT

The ASA 5510 running v9.02.

I did a

crypto ca enroll tp_name

and received the Certificate Request.

Now I want to cancel this request and use an existing wildcard cert.

Other than by removing the tp_name, can I simply cancel the request?

Re:ASA - how to cancel a crypto ca enroll

Maykol Rojas — Mon, 03 Mar 2014 16:25:44 GMT

Hello;

I think it should be better to post it on the VPN section. From the ASA perspective erasing it sounds like the only way.
Mike

Sent from Cisco Technical Support Android App

Re: ASA - how to cancel a crypto ca enroll

AlexFer — Thu, 16 Jul 2020 14:18:47 GMT

> Other than by removing the tp_name ...

Don't need to remove, just re-execute "crypto ca enroll" command to obtain new CSR.

Regarding cancelling - Cisco ASA Series General Operations CLI Configuration Guide, 9.8 states: "If the fully qualified domain name configured for the trustpoint is not identical to the fully qualified domain name of the ASA, including the case of the characters, a warning appears. To resolve this issue, exit the enrollment process, make any necessary corrections, and reenter the crypto ca enroll command." but doesn't specify how to 'exit'.