cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
556
Views
0
Helpful
0
Replies

how to export asa identity cert and import it into another asa

Oscar Quinonez
Level 1
Level 1

https://supportforums.cisco.com/document/52076/certificate-backup-and-installation-trustpoints

********************************

Based on the link above, one exports the cert from the source asa as:

config t

ciscoASA(config)# crypto ca export TrustPoint1 pkcs12 cisco123

********************************

On the target asa, one inports as:

config t

ciscoASA(config)# crypto ca import TrustPoint2 pkcs12 cisco123

<paste in the base64 encoded pkcs12>

quit

********************************

I get the following error:

CG4gZDK41PdwrBPiE5MFuUoEFGzYt2h8X7QwaNhpt/IKA/XZFUa1AgIEAA==
-----END PKCS12-----
quit
ERROR: Unable to convert the base 64 encoded pkcs12.
hacasa1/act(config)#

Apr 11 2016 17:56:06: %ASA-6-717006: PKCS #12 import failed for TrustPoint1.
Apr 11 2016 17:56:06: %ASA-5-111008: User 'admin' executed the 'crypto ca import TrustPoint1 pkcs12 cisco123' command.
Apr 11 2016 17:56:06: %ASA-5-111010: User 'admin', running 'CLI' from IP 0.0.0.0, executed 'crypto ca import TrustPoint1 pkcs12 cisco123'

Is there something else that I need to do in order to import the ASA certificate?

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: