topic CA certificates are those in Network Security

What is relation between CA certificate and identity certificate ?

eigrpy — Tue, 12 Mar 2019 06:24:08 GMT

Hi When I try to configure ASA through ASDM. There are CA certificate and identity certificate in the ASDM. Please see the picture in attachment. Anyone can explain the difference and relation between CA certificate and identity certificate ? Thank you

CA certificates are those

Dinesh Moudgil — Mon, 10 Aug 2015 07:58:14 GMT

CA certificates are those certificates which have enough privileges to authenticate an entity. Whereas Identity certificates are those certificates which define your identity/uniqueness.

For example, if you get a certificate from GoDaddy, then the certificate that you received displays your identity and is unique in nature, thus it is called Identity certificate.

However, if you open that certificate and look at the certification authority that provided you the certificate, that we will be your CA certificate.

In essence, normally you will have Identity certificate and if you wish to add popular 3rd party CA authorities, then you will need to upload that certificate in "CA Certificate" section rather than "Identity Certificates"

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.

Thank you so much for your

eigrpy — Mon, 10 Aug 2015 14:31:26 GMT

Thank you so much for your reply. It is very good explanation.

In the ASDM, we can add certificate from Identity certificate and CA certificate. So, in what situation do we add certificate from "identity certificate" ?

If you get a certificate from

Dinesh Moudgil — Mon, 10 Aug 2015 14:40:12 GMT

If you get a certificate from CA that is given to "vpn.xyz.com" , since this define ASA's identity, you need to add that in "Identity Certificate".
i.e. add the certificates that you requested to CA in "Identity Certificate" section.

Example, you have a certificate :
Issued to : abc.cisco.com
Issued by : Verisign (hypothetically)

If you open this certificate , you will see CA certificate which will have
Issued to : Verisign
Issued by : Verisign
This is CA certificate. You need to add the former in ID section and latter in CA section.

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.

Excellent Thank you

eigrpy — Mon, 10 Aug 2015 15:15:30 GMT

Excellent Thank you