Purpose of certificate in ASA

[mahesh18]

Hi Everyone,

I read ASA  has Permanent and temporary self assigned certificates need to know whay we use certificates in ASA ?

Whats there need?

Thanks

MAhesh

[Julio Carvajal · Accepted solution]

Hello Mahesh,

Those certificates that are self generated every single time the ASA boots are used when trying to connect via ASDM to the ASA (SSL).

You could also use it for VPN purposes ( Remote access IPSec, SSL VPN)

Hope this helps,

Julio

[mahesh18]

Hi Julio,

Thanks for reply.

So for Remote access VPN everytime a user connects ASA  will generate a new certificate for each user?

Or there will be single certificate for every user?

Also user PC  also needs certificate for secure VPN right ?

Thanks

Mahesh

[Julio Carvajal · Accepted solution]

Hello Mahesh,

No, for VPN you need to determine first if you are going to use a pre-shared key or the PKI ( Public key infrastructure using Certificates).

The certificate gets created when the ASA boots or you could even import a certificate from a Certificate authority and then use it for VPN but it will be the same one every single time you connect,

Regards,

Julio

[mahesh18]

Hi Julio,

For Remote VPN users you mean that User PC  can import the certificate from CA  and it will be same everytime you

connect right ?

Also will all the users have same certificate when they connect to VPN using Remote VPN client ?

Thanks

Mahesh

[Julio Carvajal · Accepted solution]

For Remote VPN users you mean that User PC  can import the certificate from CA  and it will be same everytime you

connect right ?

Exactly, the PC's enroll to the CA and get their own certificate signed by the CA, and they will use it ( everysingle time they connect until expires and then they will need to enroll one more time)

Also will all the users have same certificate when they connect to VPN using Remote VPN client ?

No, each of them will have their own public and private key  ( but all of them will be signed by the same CA)

If you have any other query just let me know

Remember to rate all of the helpful posts

Regards,

Julio

[mahesh18]

Hi julio,

Many thanks for all your answers

Best regards

MAhesh