Installing certificate on ASA 5015 for VPN

[operations1997]

Hi there,

We have a (wildcard) domain certificate for our business, I am hoping we would be able to use this also on our Firewall for VPN.

Would someone be able to point me in the right direction as to how this can be done?

 I have tried adding our .crt file however I get an error "Error: Certificate doesn't have the Basic Constraints CA flag set"

Am I doing this right? 

Should this certificate work?

Stephen

[balaji.bandi]

Yes ASA do support wildcard certificate as long as FQDN matches.

here is the guide and steps : ( read step by step) - may some small step missing i guess here. - have never seen that error.

https://www.cisco.com/c/en/us/support/docs/security-vpn/public-key-infrastructure-pki/200339-Configure-ASA-SSL-Digital-Certificate-I.html

[operations1997]

Hi BB,

Thank you for the quick reply.  I have been reading through this guide.

One possible complication I haven't seen a solution for on there is that we already have the certificate produced from a CSR generated from a different server.

Does the process work when you haven't generated the CSR from the ASDM?

Stephen