topic Purpose of certificate in ASA in Network Security

Purpose of certificate in ASA

mahesh18 — Tue, 12 Mar 2019 00:41:28 GMT

Hi Everyone,

I read ASA has Permanent and temporary self assigned certificates need to know whay we use certificates in ASA ?

Whats there need?

Thanks

MAhesh

Purpose of certificate in ASA

Julio Carvajal — Thu, 27 Dec 2012 16:28:55 GMT

Hello Mahesh,

Those certificates that are self generated every single time the ASA boots are used when trying to connect via ASDM to the ASA (SSL).

You could also use it for VPN purposes ( Remote access IPSec, SSL VPN)

Hope this helps,

Julio

Purpose of certificate in ASA

mahesh18 — Thu, 27 Dec 2012 16:51:53 GMT

Hi Julio,

Thanks for reply.

So for Remote access VPN everytime a user connects ASA will generate a new certificate for each user?

Or there will be single certificate for every user?

Also user PC also needs certificate for secure VPN right ?

Thanks

Mahesh

Purpose of certificate in ASA

Julio Carvajal — Thu, 27 Dec 2012 17:01:02 GMT

Hello Mahesh,

No, for VPN you need to determine first if you are going to use a pre-shared key or the PKI ( Public key infrastructure using Certificates).

The certificate gets created when the ASA boots or you could even import a certificate from a Certificate authority and then use it for VPN but it will be the same one every single time you connect,

Regards,

Julio

Purpose of certificate in ASA

mahesh18 — Fri, 28 Dec 2012 17:44:22 GMT

Hi Julio,

For Remote VPN users you mean that User PC can import the certificate from CA and it will be same everytime you

connect right ?

Also will all the users have same certificate when they connect to VPN using Remote VPN client ?

Thanks

Mahesh

Re: Purpose of certificate in ASA

Julio Carvajal — Fri, 28 Dec 2012 17:55:54 GMT

For Remote VPN users you mean that User PC can import the certificate from CA and it will be same everytime you

connect right ?

Exactly, the PC's enroll to the CA and get their own certificate signed by the CA, and they will use it ( everysingle time they connect until expires and then they will need to enroll one more time)

Also will all the users have same certificate when they connect to VPN using Remote VPN client ?

No, each of them will have their own public and private key ( but all of them will be signed by the same CA)

If you have any other query just let me know

Remember to rate all of the helpful posts

Regards,

Julio

Re: Purpose of certificate in ASA

mahesh18 — Fri, 28 Dec 2012 18:01:49 GMT

Hi julio,

Many thanks for all your answers

Best regards

MAhesh