Migrate certificates on Cisco ASA

[Mokhalil82]

Hi

I am migrating from a ASA5520 to an ASA5525-x. I am just going through the configs and copying over.

How do I migrate over the certificates? 

Thanks

[Marvin Rhoads · Accepted solution]

If it's a public PKI signed certificate, not easily. You have to have the server (ASA) private key to use it on a different ASA. Unless you marked it exportable at the time of creation, it is not exportable by default.

You might inquire as to whether the issuer will re-issue if you submit a new CSR.

[Mokhalil82]

Thanks Marvin, Its a public CA cert so looks like I may have to submit a new CSR as there is not export option in ASDM for it