ASA certificate change

[manvik]

Need to change ASA certificate in ASDM used for anyconnect VPN. The certificate is public CA signed one.

Does changing certificate disconnects already connected anyconnect clients?

ASA supports .cer or crt format?

[Rob Ingram · Accepted solution]

@manvik sessions will be disconnected. You should make the change out of hours.

Yes, .cer and .crt is supported.

https://www.cisco.com/c/en/us/support/docs/security-vpn/public-key-infrastructure-pki/200339-Configure-ASA-SSL-Digital-Certificate-I.html