Can i proceed to import identity cert to my standby firewall?

[donnie]

Hi, i have a standby firewall which is part of a active standby setup.

When i import the same cert that was deployed successfully to my active firewall, i get the following error.

"If ASDM sends configuration to this standby ASA, the standby will not forward the configuration to the active ASA, losing synchronization of the configuration of the failover pair"

Is it safe to proceed?

I am importing the pkcs12 cert under "identity  certificates" which will also produce the CA root certificate under "CA  certificates". Pls advise. Thk you.

[Jennifer Halim]

You shouldn't really need to import the certificate to the standby ASA. It should really get replicated to the standby ASA during configuration synchronization.

However, if the certificate on the active unit doesn't get replicated to the standby ASA, you can issue the command "write standby", and the certificate should get replicated to the standby unit.

Here is a bug that your ASA might be affected:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsr71150