Key download

[swathi-sankabathula]

Hi Everyone,

I want to know how can I download Key from ASA Firewalls. In ASDM while generating CSR, i have generated a key with name "ASDM_TrustPoint15". how can I download only this key, not the CSR.

Thanks,

Swathi

[Marvin Rhoads]

You should be able to do the following from cli:

crypto ca export <TrustPointName> pkcs12 <password>

Save the output to a text file then convert it using openssl (available for Linux or within Windows if you install the optional Windows Subsystem for Linux (WSL)).

openssl pkcs12 -in TrustPointName.txt -out key.pem -nocerts -nokeys -passin pass:<password>