topic Firepower Management Center - disable certificate authentication in Network Security

Firepower Management Center - disable certificate authentication

cisco_kiwi — Fri, 21 Feb 2020 14:34:05 GMT

Hi,

I managed to enable certificate authentication on our Firepower Management Center and now I am unable to browse to the URL to make changes.

I see others have come across this issue and they have been able to disable the cert via the CLI with ASA FirePOWER. But from what I can find the Firepower Management Center doesn't have a CLI and there is no way to disable the certificate.

Does anyone know a way to disable the cert or do I have to delete the config and start again.

Any help would be much appreciated.

Re: Firepower Management Center - disable certificate authentication

mikael.lahtela — Tue, 24 Oct 2017 21:03:38 GMT

Hi,

You can ssh to FMC, login with admin credentials.
If you are unsure how to configure this you should contact Cisco TAC as you can mess things up here.

You need to edit /etc/httpd/ssl_certificates.conf with sudo vi /etc/httpd/ssl_certificates.conf
Change the line "SSLVerifyClient x" to "SSLVerifyClient none".
Restart FMC or user pmtool restartbytype gui

To use command vi on linux (fmc os), here is a basic guide:
https://ryanstutorials.net/linuxtutorial/vi.php

br, Micke

Re: Firepower Management Center - disable certificate authentication

hash2k2 — Wed, 09 Dec 2020 16:00:12 GMT

Thanks, that helped me a lot as I accidently activated client certificates.

Re: Firepower Management Center - disable certificate authentication

Truman — Tue, 05 Dec 2023 01:06:48 GMT

Thank you, that helps me too as I accidentally enabled the client certificates.