Migrating Self signed Cert ASA 5545 to FTD 2130

[Alemend88]

Hi, Im just wondering if someone could shine some light on my case. Im in the middle of a migration  from an ASA 5545 to a FTD-2130 the ftd will be my DR site and some applications are using  the self singed certificate of the ASA. My question is : can I migrate the self signed certificate of the Asa to the Ftd, even thou when the hostname and IP address will be diferent in my ftd? If that is possible should I import the self singed as a pcks12 file and installing in the FTD? I hope someone can answer my question.

Thank  you very much!

[Mohammed al Baqari]

Hi, let me remind you that self signed isn't best practice.

Coming to your question, if your private key is exportable then you can
export as p12 and import it in ftd. Otherwise no way of doing it.

If the name of ftd isn't same as the certificate cn, it will be imported
but you still get certificate errors (you have to match ftd fqdn with
certificate cn).

[Alemend88]

Hi Mohammed, thanks for the advise, actually we are pushing hard to get a CA singed by a 3rd party. And the self signed its my last bullet, I was able to exported to pcks12 and imported in the ftd however Im getting the error, and I guess its because of the mismatch of the ftd fqdn and the cn , its there a way to change it from the FMC or only from CLI?  

[Mohammed al Baqari · Accepted solution]

Yes, you can go to fmc > devices > #select the box# > select the 1st tab
and edit the device name.

**** please remember to rate useful posts