cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
655
Views
5
Helpful
2
Replies

FirePower Mangement Center User Certificates

gregory.steele1
Level 1
Level 1

I mistakenly enabled user certificate authentication in the configuration settings of our FirePower Management Center 1500, and now I have locked myself out of the web UI. I still have access to the CLI via ssh, but how can I correct this from here?

1 Accepted Solution

Accepted Solutions

Pujita Patni
Cisco Employee
Cisco Employee
Hi Gregory,
Run the following commands on the CLI:
  1. admin@example:~$ sudo vi /etc/httpd/ssl_certificates.conf
Note: You will then be prompted for the password of the currently logged in user via ssh.
 2. Move to the line that starts with SSLVerifyClient then move to the word "required" and you will need to replace the word required with "none".  To do this, enter in cw.
Note: This will allow you to only replace the word required with the word none. 
 3. This line should look like the following after editing:
SSLVerifyClient none 
 4.Press the escape key.
 5. Write the changes to the disk:
:wq 
 6. Restart the httpd service:
admin@example:~$ sudo pmtool restartbyid httpsd
 7. Refresh the Web Interface and log in to the GUI.
 

Thanks,

Pujita

Rate if it helps !

View solution in original post

2 Replies 2

Pujita Patni
Cisco Employee
Cisco Employee
Hi Gregory,
Run the following commands on the CLI:
  1. admin@example:~$ sudo vi /etc/httpd/ssl_certificates.conf
Note: You will then be prompted for the password of the currently logged in user via ssh.
 2. Move to the line that starts with SSLVerifyClient then move to the word "required" and you will need to replace the word required with "none".  To do this, enter in cw.
Note: This will allow you to only replace the word required with the word none. 
 3. This line should look like the following after editing:
SSLVerifyClient none 
 4.Press the escape key.
 5. Write the changes to the disk:
:wq 
 6. Restart the httpd service:
admin@example:~$ sudo pmtool restartbyid httpsd
 7. Refresh the Web Interface and log in to the GUI.
 

Thanks,

Pujita

Rate if it helps !

Pujita, THANK YOU!

This absolutely fixed the problem. I appreciate the help!

Review Cisco Networking for a $25 gift card