FTD locally managed - ACME

[Andreas Seidenstuecker]

Hi,

today i installed FTDv (SW 10.0) in my CML to check, if there is a possibility to get a certificate via ACME. With FMC this should be possible but I cannot find a possibility in th FDM.

I also cannot find sth. in the guides.

Does someone hav a solution for it?

Thx!

[ashish.kushwaha]

Hello @Andreas Seidenstuecker ,

you may refer the below community article, this will help for you.
https://community.cisco.com/t5/network-security/fmc-ftd-10-acme-cert/m-p/5374277 

[Marvin Rhoads · Accepted solution]

It's not currently possible with FDM. The feature is limited to FMC-managed devices.

It's TBD whether a future release (post-10.0.0) will add it into the entry level on-box manager.

[ahollifield]

Friends don't let friends use FDM. Why not use cdFMC?

[Andreas Seidenstuecker]

Customer needed a simple low-cost remote-access solution. Why is Cisco offering this device as a standalone version and everyone is telling you not to use it - makes no sense at all.

Hopefully they´ll implement it in the next minors, otherwise I´ll try to find a workaound with the api.

[Marvin Rhoads]

If you are a partner, feel free to submit a Firestarter request to have the feature added to FDM.

FWIW, the feature is available on ASA (either on CSF hardware or in ASAv form factor) without any required external management solution.