ASA-Cx decrypted SSL

[admin000175]

Hello guys.

Can not solve the problem. if it is solved.

I need to download a certificate to decrypt SSL. Doing all the official b_User_Guide_for_ASA_CX_and_PRSM_9_2.pdf a manual, but here I did not find a detailed description of the certificates. I have Microsoft PKI certificates in the company and that it produces are trusted throughout the company.

Did the following template with a web server private key obtained using open SSL (openssl pkcs12-in keyStore.pfx-out keyStore.pem-nodes) convert in .pem.

Just uploaded a public certificate of the certification

cation and also convert in .pem.

When downloads ace ck get sledushchuju error (attach pic)

For earlier thanks

[Tarik Admani]

Hi,

I dont know if you fixed your issue or not, but the ASA CX cert must be a root or intermedate certificate. You will need a intermediate certificate so it can present the client the server identity as trusted by the internal CA.

Thanks,

Tarik Admani
*Please rate helpful posts*

[Nangui Djechou Schallum Phares]

Hi admin000175,

I don't know if you hv come to solve the issue but, I think I hv the solution.

just follow the steps mentioned on the link.

https://supportforums.cisco.com/blog/12536676/cisco-asa-cx-decryption-setting-import-ca-certification-step-step

Thanks.

Schallum Nangui

CCIE #41765