PIX Certificate Error with Authentication Proxy and PDM

[s-kuhn]

After rebooting our PIX (6.3.4 / failover) i always get an error message if we try to connect to te pdm or to the internet over the authentication proxy. This happens because the PIX generates a new self signed certificate with the SAME SERIAL NUMBER but with another date! This happens with all newer browsers like "Firefox, Mozilla, ...

=> See the attachment with the error message.

Is that a known issue? Is there a workaround?

[nkhawaja]

you can try to clear up the certificates on your browser first. see if that helps

thanks

Nadeem

[nkhawaja]

you can also try to delete and generate the rsa keys on the pix again.

ca zeroize rsa key

the run "setup"

[s-kuhn]

that is the better solution. can be done by one person.

[s-kuhn]

that works fine.

but to tell >500 people to delete a certificate to brwose the internet...