Installing certificates for 2 FTD trough FMC for Remote VPN

[LuigiDiFronzo9542]

Hello,

Comparing with ASA the procedure for install or renew certificates on FMC is quite diferent. What would be the formal procedure for install a remote vpn certificate over 2 FTD via FMC? The same certificate can be applied to both FTD?

Thanks. 

[MHM Cisco World]

https://integratingit.wordpress.com/2018/11/10/ftd-vpn-with-certificates/

[LuigiDiFronzo9542]

Hello,

Thanks for the Reply.

In this case, for install de certificate to both firepower would be needed to generate a .csr file for each devices?

Thanks.

[MHM Cisco World]

Yes for each FTD.

[LuigiDiFronzo9542]

Thank you,

Two final questions. When the csr request file is sent to the PKI, we received 3 crt files. One for root, an intermediate certificate and the server certificate. The server certificate is the one we have to add in : Devices --) Certificates for deploy in the ftd, that's right?

In the next few days, the FTDs will be placed in HA. In this case, it would only be necesary lo leave the certificate installed in the active FTD? 

Thanks.