topic Backup & Restore keys in Network Security

Backup & Restore keys

Gordon Ross — Mon, 11 Mar 2019 20:50:58 GMT

How do you backup & restore the crypto keys on an ASA ?

GTG

Backup & Restore keys

Allen P Chen — Sun, 26 Jun 2011 22:48:11 GMT

Hello,

You can use the "crypto ca export/import" commands to export and restore crypto keys.

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/c5.html#wp2224326

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/c5.html#wp2224488

Hope this helps.

Backup & Restore keys

Gordon Ross — Mon, 27 Jun 2011 04:57:28 GMT

asa1# sh crypto key mypubkey rsa

Key name: blah

Usage: General Purpose Key

Modulus Size (bits): 2048

Key Data:

.....

asa1#conf t

asa1(config)# crypto ca export blah identity-certificate

ERROR: The trustpoint does not exist

😞

Backup & Restore keys

Allen P Chen — Mon, 27 Jun 2011 17:37:54 GMT

Hello,

I apologize for the confusion, I thought your keys were associated with a trustpoint already. On the ASA, you will not be able to keys directly. You will need to put your rsa key into a trustpoint first. You can then export the certificates + key in a pkcs12 and then extract the key from it using something like openssl.

For example, I have created a key on my ASA called testkey and have exported it below:

GENERTATING KEY...

asa(config)# crypto key generate rsa label testkey mod 1024

MAKING DUMMY TRUSTPOINT...

asa(config)# crypto ca trust dummy

asa(config-ca-trustpoint)# keypair testkey

EXPORTING KEY...

asa(config)# crypto ca export dummy pkcs12 cisco123

WARNING: Temporary self-signed certificate is being generated to export the keypair since an associated ID certificate is not available.

Hope this helps.