ASA-CX Decryption Certificate

[cabell911]

I'm stuck on the requirement to have an intermediate certificate for decryption. I have a certificate assigned to the ASA from a commercial CA for SSL VPN purposes; could I use that? Concerning the private key, is that what's contained in the initial cert request I made to the CA? Any help/advice is appreciated.

John

[INSYSGROUP]

I would say you would need to convert your existing certificate to Base-64 format.  You may need to save the certificate in .cer extension, but I do believe you can rename it to .pem.

You may also look for OpenSSL - I think you can also use it to convert the certificate.

[cabell911]

I did that, but it throws an error about needing to be an intermediate certificate authority.