topic Re: Which type of SSL cert do I need? in Network Security

Which type of SSL cert do I need?

stephenkeating — Mon, 01 Aug 2022 15:11:03 GMT

Hello

I am about to get an SSL cert for my Firepower 1120 from GoDaddy. Which OS should I do this in, Apache, or which one?

Thanks

Stephen Keating

Re: Which type of SSL cert do I need?

Rob Ingram — Mon, 01 Aug 2022 15:17:52 GMT

@stephenkeating you can generate the Certificiate Signing Request (CSR) on the FTD itself, then send this CSR to GoDaddy to sign, you then import the identity certificate to the FTD. https://www.cisco.com/c/en/us/support/docs/security-vpn/public-key-infrastructure-pki/215849-certificate-installation-and-renewal-on.html

Or alternatively you could use openssl to generate the CSR. This guide shows you how to use openssl to create a CSR for the FTD. https://integratingit.wordpress.com/2018/11/10/ftd-vpn-with-certificates/

Re: Which type of SSL cert do I need?

stephenkeating — Mon, 01 Aug 2022 15:24:42 GMT

Thanks for the information. I have already created the openssl csr, but when I go on the GoDaddy site to generate the SSL, it asks which language or OS to produce it in. The choices are Apache, Microsoft, etc. Which one should I choose for the Firepower 1120?

Re: Which type of SSL cert do I need?

Rob Ingram — Mon, 01 Aug 2022 15:37:58 GMT

@stephenkeating select the server type as other, as per the example in this guide. https://www.cisco.com/c/en/us/support/docs/security-vpn/public-key-infrastructure-pki/200339-Configure-ASA-SSL-Digital-Certificate-I.html

Re: Which type of SSL cert do I need?

Marvin Rhoads — Mon, 01 Aug 2022 17:53:07 GMT

The server type is just used for the provider (CA) to collect analytics information. No matter which type you select you will get the exact same x.509 certificate. For what it's worth, I tick the Apache box if it's required to give them something.

Re: Which type of SSL cert do I need?

stephenkeating — Mon, 01 Aug 2022 17:55:01 GMT

Thanks for the information