SSLM Certficates multiple vendors

[Jithesh K Joy]

HI

      We are using around 50  Verisign Certificates installed  in the Cisco SSLM module .  Now we plan to have a new contract with another vendor Global Sign here onwards. I would like to know if it possible to use more than one Vendors( Verisign, Global Sign )  certificate chains installed in the same module. Ou plan is that old certificates from Verisign will be functioning as it is and new certificates will be issued by  Global Sign and will be installed in the same module,  When Old cerificates expires the same wil be removed and will be newly created from Global Sign and will be installed

Thanks in advance for your comments

SSLM#sh version

Cisco IOS Software, SVCSSL Software (SVCSSL-K9Y9-M), Version 12.3(8)IA  RELEASE SOFTWARE \nCopyright (c) 1986-2008 by Cisco Systems, Inc.

Compiled Fri 11-Jul-08 13:52 by integ

ROM: System Bootstrap, Version 12.2(11)YS1 RELEASE SOFTWARE

Regards'

Jithesh

[Pablo · Accepted solution]

Hi Jitesh,

You will not have any problem installing new certificates from a different vendor, the SSLM accepts any certificate regardless of the vendor who signed your CSR.

As long as the new certificate is 1024 or 2048 bits of encryption and the cert chain is installed correctly for each trustpoint you should be ok.

Hope this helps.

Pablo

Cisco TAC

[Jithesh K Joy]

Hi Pablo,

            Thanks for your answer. Could you plz provide me the URL for the bug related to SSLM

Regards

Jithesh

[Pablo]

Hi Jitesh,

Here is the information with open caveats for version 2.X and 3.X

SSLM 2.X

http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ssl/2.1/release/notes/OL_5277.html

SSLM 3.X

http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ssl/3.1/release/notes/ol_9138.html.

Pablo

Cisco TAC