https certificate on WAAS Central Manager

[CARL HEMMINGSEN]

Hi,

I wanting to know if it is possible to authenticate the WAAS central manager with a different certificate/key pair than the self-signed certificate/key pair.

I can't find any information about installing my own certificate/key pair.

Thanks in advance

[dstolt · Accepted solution]

Hey Carl,

Unfortunitely, this is not available for the CM at this time. This is an interesting enhancement request, however.

Thanks,

Dan

[CARL HEMMINGSEN]

Thanks Dan,

It's a fairly standard feature with Cisco management tools that support https, so I'm a little surprised it's not available.

Thanks for the update.

[Edward Clear]

Has there been any movement on adding this capability?   It seems like this shouldn't be much of a stretch with the SSL and PKI capability already in WAAS.

We're getting more heat from the internal security scanners who are red flagging self-signed certs for HTTPS, so it's not an academic question.

[Vincent Fortrat]

Hello,

I'd like to know if there is any update on this. I'm currently running release 5.3.1 on WAAS central-manager and I'd like to install a PKI signed certificate to secure the GUI sessions.

I see that there is a "SSL Admin Service" item under Security menu but it isn't mentionned anywhere in the documentation...

Thanks,

Vincent

[Swati Chopra]

We do have an option for the same:

First you may generate a CSR using:

http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v531/command/reference/execmds.html#wp2773266

Once done you can get the cert and import cert and keys on Central Manager using admin option

http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v531/command/reference/execmds.html#wp2773369

"admin"

Specifies that the certificate and key are for the Central Manager admin service. This option can be used only on the Central Manager.

The Central Manager admin service uses a self-signed certificate and key by default. You can use the crypto import pkcs12 admin command to import a custom certificate and key in PKCS12 or PEM format. If you delete the custom certificate and key, the self-signed certificate and key again become active.

Hope this helps,

Swati