Appliance Certificates - Converting from RSA to ECC

[JonDutton5674]

We currently have a certificate on our production system (AsyncOS Version: 13.5.1-277) that is set to expire. InfoSec wants to convert from RSA to ECC if possible. Is it as simple as generating a new self-signed cert which will overwrite the existing cert, generate a CSR, and then import the cert?

[Ken Stieers]

You ought to be able to just replace it.

Mine are all ECC...

[marc.luescherFRE]

Hi there,

just create a new CSR request and import the resulting cert and chain and you will be all set.

Nothing to worry about.

-Marc