ASA 8.2(2) User Certificate expiration

[scorbett]

I have our ASA (5520) setup for SSL Certificate authentication and it is the certificate authority using self signed certificates (http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808efbd2.shtml).  It works really well but I see that the User Certificate installed on the client is only good for one year.  Is there any way to configure that expiration date?  Is this by default?

Thanks

[Rudresh Veerappaji]

Hi,

The default validity for a user certificate generated from a ASA as a CA server is one year (by default). But while generating the certificate from the ASA, you can change the user certificate vaildity to more than one year. Following link provides you with the procedure:

http://www.cisco.com/en/US/docs/security/asdm/6_2/user/guide/certs.html#wp1357943

Let me know if this helps,

Cheers,

Rudresh V