HTTPS Certificate for ASDM to access to a Cisco Firepower with ASA image

[Hannibal]

Hi all, the best Community of the internet.

I want to open a new issue to see if anybody have some experiences about next.

Happen that I have a security solution installed based on two Cisco Firepower 2130 with ASA image configured as failover and multiple context.

My customer require to me to generate a HTTPS Certificate for ASDM to access to a Cisco Firepower with ASA image. He want to access to the chassis via https and no using http. I have been looking documentation about how to generate the HTTPS certificate for ASDM to access to the Firepower 2130 with ASA image but it is very very confused (a lot of links with differents procedure, diferents commands in CLI, etc.)

Please, does anyone know where to find this information or have you had the experience of generating this type of certificate for the ASDM to gain access through this way?

ASA Firmware version is 9.14

Thanks, community

The Best of the Internet

Hannibal

[balaji.bandi · Accepted solution]

Can you check this - is this what you looking  :

https://www.cisco.com/c/en/us/td/docs/security/asdm/identity-cert/cert-install.html

[Hannibal]

Excellent my friend, Balaji

Thank you very much

[Marvin Rhoads · Accepted solution]

It's like @balaji.bandi linked for the ASA certificate used by ASDM. If you are in appliance mode, that's the only certificate used for identity.

The actual chassis has a separate certificate that's used by the Firepower Chassis Manager in some modes of operation (i.e. platform mode vs. appliance mode).

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp2100/firepower-2100-gsg/asa-platform.html

[Hannibal]

Thank you Marvin

Good to know this link and to consider it. I didn't really know much about these https certificates

Best regards

Hannibal