topic Re: Cisco ASA 5545 Certificate Generation in Network Security

Cisco ASA 5545 Certificate Generation

TW80CJ5 — Thu, 28 Mar 2019 13:57:35 GMT

We are trying to generate certificates on Cisco ASA 5545. ASA Version 9.4(4)32 ASDM Version 7.12(1)

The issue is when we are going through: Configuration>Certificate Management>Identity Certificates>Add

We select the Add a new identity certificate radio button. At key pair, we select new. At key type, RSA is selected and we use 2048 as our size. When we select add certificate, it generates a SHA-1 certificate. This is no good...

The problem is we need a SHA-256 certificate. Currently, we are having to use OpenSSL to regenerate a SHA-256 key. It seems as though there should be a way to generate a SHA-256 certificate as a default within ASDM.

What am I missing?

Re: Cisco ASA 5545 Certificate Generation

Marvin Rhoads — Thu, 28 Mar 2019 15:00:32 GMT

Unfortunately ASDM doesn't give you this option, even with the latest release.

You have to use a third party tool to generate the CSR. Personally I prefer XCA (a free GUI-based certificate management tool)

Re: Cisco ASA 5545 Certificate Generation

Rahul Govindan — Thu, 28 Mar 2019 15:20:16 GMT

ASA enhancement bug below:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuj67576/?reffering_site=dumpcr

Not yet fixed.