cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
543
Views
5
Helpful
1
Replies

Question about ASA 5515-X Active/Standby and Certificate

Gerhard.Oettle
Level 1
Level 1

                   Hello,

I have setup a pair of ASA 5515-X Ver 9.1.xx that should be used for remote Access using the AnyConnect Mobility Client 3.1.xx.

The Boxes are redundant in an Active / Standy scenario running one Security context.

When connecting by https to the box I get several messages about an insecure or unidentified Certificate.

So I have to install an official Certificate on the box to prevnt this messages.

Do I need to install this certificate only at the Acitve Primary ASA or is there a need to have two seperate Certificates on each box ?

Thank you for your help.

1 Reply 1

npokhriy
Level 1
Level 1

Hi Gerhard,

Yes, you are right. We need to install the certificate from well known third party CA authority on out ASA. We only need to install the certificate on Primary ASA. Once you will do "write standby" on your primary ASA, It will write the certificate on standby ASA as well.

Regards,

Naresh