https://community.cisco.com/t5/network-security/fmc-certificates/m-p/5143978#M1114234 <P>While FMC can use (trusted) root CA certificates (via Objects &gt; Object Management &gt; PKI &gt; Trusted CAs), that is not required to be able to use a certificate for the FMC itself. For that purpose, you need only install the FMC server certificate under System &gt; Configuration &gt; HTTPS Certificate. You also have the option to import the chain from the issuing / root CA in that dialog box.</P> <P><A href="https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/720/management-center-admin-72/system-config.html#id_73638" target="_blank">https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/720/management-center-admin-72/system-config.html#id_73638</A></P> Fri, 12 Jul 2024 07:27:41 GMT Marvin Rhoads 2024-07-12T07:27:41Z https://community.cisco.com/t5/network-security/fmc-certificates/m-p/5143903#M1114233 <P>Hi I have been given a task to&nbsp;<SPAN>Install PKI Root / Issuing CA Cert Objects onto a new HA FMCv deployment. I have setup HA and preconfigured everything.&nbsp;<BR /><BR /></SPAN></P><P><SPAN>I have been provided three certs one root and two .pfx files from the customer.&nbsp;</SPAN></P><P><SPAN>labelled&nbsp;</SPAN></P><P><SPAN>root.p7b</SPAN></P><P><SPAN>fmc1.pfx</SPAN></P><P><SPAN>fmc2.pfx</SPAN></P><P><SPAN><BR />How does this get setup with FMC?&nbsp;<BR />I know with ISE you install the root into the trustees cert store then generate a cert, get it signed and &nbsp;bind it, but cannot see a trust cert area within FMC..</SPAN></P><P>&nbsp;</P><P>&nbsp;</P> Fri, 12 Jul 2024 03:39:49 GMT https://community.cisco.com/t5/network-security/fmc-certificates/m-p/5143903#M1114233 NetworkMonkey101 2024-07-12T03:39:49Z https://community.cisco.com/t5/network-security/fmc-certificates/m-p/5143978#M1114234 <P>While FMC can use (trusted) root CA certificates (via Objects &gt; Object Management &gt; PKI &gt; Trusted CAs), that is not required to be able to use a certificate for the FMC itself. For that purpose, you need only install the FMC server certificate under System &gt; Configuration &gt; HTTPS Certificate. You also have the option to import the chain from the issuing / root CA in that dialog box.</P> <P><A href="https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/720/management-center-admin-72/system-config.html#id_73638" target="_blank">https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/720/management-center-admin-72/system-config.html#id_73638</A></P> Fri, 12 Jul 2024 07:27:41 GMT https://community.cisco.com/t5/network-security/fmc-certificates/m-p/5143978#M1114234 Marvin Rhoads 2024-07-12T07:27:41Z