cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


114
Views
0
Helpful
3
Replies
Beginner

Change expiration date in asa identity certificate

hello to everything, I have a query, I would like to know if there is a way to change the expiration date of identity certificates on a 5585-x handle since at the time of generating it it generates it for 10 years and I need it only for 1.

Thank you very much for your help and annex img.ic.png

 

3 REPLIES 3
Cisco Employee

Re: Change expiration date in asa identity certificate

Hi  Luis_Regalado,

 

Considering that looks like a selfsigned cert, this expiry date come by default and can't really be modified.

The fact this is valid for 10 years will not make any difference since if after a year you want to remove this one and create a new one to refresh it you can do it without any problem.

 

Hope this info helps!!

 

Rate if helps you!! 

 

-JP- 

Beginner

Re: Change expiration date in asa identity certificate

Hello JP Miranda Z and thank you very much for your response, I understand that by default the handle generates said certificate for 10 years now I have a query, I already have a certificate generated by my certifying house (DigiCert) that I have previously added in the section of  CA certificates be used in the identity certificates section? And if so, could you tell me how?

Thanking you very much for your help I hope your feedback

2.png

 

1.jpg

 

 

 

Cisco Employee

Re: Change expiration date in asa identity certificate

 Luis_Regalado,

 

If you already have a 3rd party CA you can use the following guide:

 

https://www.cisco.com/c/en/us/support/docs/security-vpn/public-key-infrastructure-pki/200339-Configure-ASA-SSL-Digital-Certificate-I.html

 

Normally you have 2 options:

 

1- Generate the CSR on the identity cert tab and get this signed by Digicert so you can install it on the ASA.

2- Request a pkcs12 and install the full chain on the identity certificate tab.

 

Hope this info helps!!

 

Rate if helps you!! 

 

-JP- 

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here