Ramifications to VPN phone state after converting ASA to wildcard certificate?

[Athonia Cappelli]

HI all,

The SSL certificate on our ASA pair has a "common name" like PhoneVPN.myCompany.com in the certificate. That cert expired recently. amazingly this didn't cause the phones to complain yet.

I now have a wildcard certificate I'd like to use instead of renewing PhoneVPN.myCompany.com. 

Are there any known problems with installing wildcard certificates on ASAs that have certificate based phones connected? 

Thanks

--Athonia

[Mohammed al Baqari]

Hi,

This shouldn't be a problem as the certificate is used by ASA to
authenticate the phones and wild card certs is very compatible with ASA.

[Athonia Cappelli]

Fab. I'll attempt the upgrade today and write back with any details. As it stands now phones are still connecting to the VPN concentrator even though the cert is expired.