cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3234
Views
0
Helpful
5
Replies

https certificate on WAAS Central Manager

CARL HEMMINGSEN
Beginner
Beginner

Hi,

I wanting to know if it is possible to authenticate the WAAS central manager with a different certificate/key pair than the self-signed certificate/key pair.

I can't find any information about installing my own certificate/key pair.

Thanks in advance

1 Accepted Solution

Accepted Solutions

dstolt
Cisco Employee
Cisco Employee

Hey Carl,

Unfortunitely, this is not available for the CM at this time. This is an interesting enhancement request, however.

Thanks,

Dan

View solution in original post

5 Replies 5

dstolt
Cisco Employee
Cisco Employee

Hey Carl,

Unfortunitely, this is not available for the CM at this time. This is an interesting enhancement request, however.

Thanks,

Dan

Thanks Dan,

It's a fairly standard feature with Cisco management tools that support https, so I'm a little surprised it's not available.

Thanks for the update.

Has there been any movement on adding this capability?   It seems like this shouldn't be much of a stretch with the SSL and PKI capability already in WAAS.

We're getting more heat from the internal security scanners who are red flagging self-signed certs for HTTPS, so it's not an academic question.

Hello,

I'd like to know if there is any update on this. I'm currently running release 5.3.1 on WAAS central-manager and I'd like to install a PKI signed certificate to secure the GUI sessions.

I see that there is a "SSL Admin Service" item under Security menu but it isn't mentionned anywhere in the documentation...

Thanks,

Vincent

We do have an option for the same:

First you may generate a CSR using:

http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v531/command/reference/execmds.html#wp2773266

Once done you can get the cert and import cert and keys on Central Manager using admin option

http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v531/command/reference/execmds.html#wp2773369

"admin"

Specifies that the certificate and key are for the Central Manager admin service. This option can be used only on the Central Manager.

The Central Manager admin service uses a self-signed certificate and key by default. You can use the crypto import pkcs12 admin command to import a custom certificate and key in PKCS12 or PEM format. If you delete the custom certificate and key, the self-signed certificate and key again become active.

Hope this helps,

Swati

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers