topic Re: SSM On-Prem: Using CLI to create CSR and import TLS Cert for Brows in Network Security

SSM On-Prem: Using CLI to create CSR and import TLS Cert for Browser

Chris S-C — Fri, 31 May 2024 09:51:44 GMT

I'm currently standing up a Cisco SSM On-Prem but have hit a bit of an issue regarding creating and adding a browser TLS certificate. Our (private) Certificate Authority have very strict rules on what can and can't be in the CSR, unfortunately the SSM On-Prem GUI CSR creation screen does not fit in with their world view so I cannot create a CSR via that route!

I have been digging around on the CLI and know that OpenSSL is installed and that the front-end runs in a Docker container. Is anyone aware of any "gotcha's" for using the CLI to create a new Private Key and CSR then importing the new .PEM certificate?

I have tried once but the docker container would not restart, looking at the logs it seemed to not like the Private Key. My current assumption is that the user.pem and user.key files in /home/deployer/ssl are the correct cert/key combo - this is mapped to /etc/nginx/ssl in the frontend Docker container.

Any helpful hints would be appreciated.

Re: SSM On-Prem: Using CLI to create CSR and import TLS Cert for Brows

simon-J — Mon, 09 Feb 2026 16:23:14 GMT

Did you find any solution to do this manualy ?

Re: SSM On-Prem: Using CLI to create CSR and import TLS Cert for Brows

Chris Sheppard-Cheesman — Tue, 10 Feb 2026 15:28:58 GMT

Yes, I did work out how to do it. I can provide a "how to" if you need it.

Re: SSM On-Prem: Using CLI to create CSR and import TLS Cert for Brows

simon-J — Wed, 11 Feb 2026 08:38:33 GMT

Hey yes i would like a how to do, i cant use csr due to internal policies for the ssm cert.

Re: SSM On-Prem: Using CLI to create CSR and import TLS Cert for Brows

Chris Sheppard-Cheesman — Wed, 11 Feb 2026 14:17:27 GMT

Hopefully this will help.