I have an ASA-5508-X, running FTD, controlled by a vFMC device. Both are running 6.2.2 software. It is partly implemented.
I want to set this up to serve Anyconnect clients, and I want SSL inspection. My understanding is that both of these things will require a certificate on the 5508. Since some client machines will be BYOD devices, I want a certificate that is trusted without any configuration on the client machines.
I want to generate a Certificate Signing Request, send it off to a public CA, (Godaddy or Comodo or whatever) then install the certificate on the 5508. I cannot, however, figure out how to generate the CSR. Am I missing something really obvious here?
