topic Why ASA creates self assigned certificate on each reboot in Network Security

Why ASA creates self assigned certificate on each reboot

mahesh18 — Tue, 12 Mar 2019 02:12:00 GMT

Hi Everyone,

I noticed

"By default, the security appliance has a self-signed certificate that is regenerated every time the device is rebooted. We can purchase your own certificate from vendors, such as Verisign t, or you can configure the ASA to issue an identity certificate to itself. This certificate remains the same even when the device is rebooted.

Need to know the reason behind the creation of self assigned certificate on each reboot?

Regards

MAhesh

Why ASA creates self assigned certificate on each reboot

Julio Carvajal — Mon, 15 Jul 2013 01:13:49 GMT

Hello Mahesh,

As you mention that's by default and by desing,

That would help us in the case we set a SSL session to the box (Anyconnect, ASDM) as we will not need to go a step further and manually create or generate an SSL certificate,

Why?

Because the firewall will do it automatically, altough if you purchase one from a CA you can overwrite it by installing the certificate and set it as the SSL certificate for any SSL session,

For Networking Posts check my blog at http://laguiadelnetworking.com/

Cheers,

Julio Carvajal Segura

Why ASA creates self assigned certificate on each reboot

mahesh18 — Mon, 15 Jul 2013 16:39:52 GMT

Thanks Julio

Regards

Mahesh

Re: Why ASA creates self assigned certificate on each reboot

Marvin Rhoads — Mon, 15 Jul 2013 16:50:05 GMT

It does make setup easier. you can also create a self-signed certificate and make that persistent and associated with your SSL VPN and/or device management.

Why ASA creates self assigned certificate on each reboot

mahesh18 — Mon, 15 Jul 2013 16:51:47 GMT

Hi Marvin,

Thanks for replying.

Best Regards

Mahesh