cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
932
Views
1
Helpful
2
Replies

Cisco WSA GUI Certificate Setup

Mandeep singh5
Level 1
Level 1

Hello All,

I would like to add Cisco WSA GUI Management self-signed certificate. Can anyone guide me how I can create and add an self-signed certificate so that I won't see not secure connection when I'm accessing Cisco WSA.

@amojarra @websecurity 

1 Accepted Solution

Accepted Solutions

amojarra
Cisco Employee
Cisco Employee

Hello @Mandeep singh5 

Thanks for reaching out  

Kindly : 

[1] From the webUI under Network (in the top menu) 

[2] Select Certificate Management

[3] Under Appliance Certificates Select Add Certificate...

[4] Select Certificate Type (Self Signed Certificate or Import Certificate)

[5]

[5-1] If you select the Self-Signed Certificate:

[5-1-1] complete the fields 

Note: The Private key size must be in the range of 2048 to 8192.

[5-1-2] Click Next

[5-1-3] You can Download the CSR (Download Certificate Signing Request...) and Sign it with your organization's CA Server then Upload the Signed certificate and submit 

OR 

[5-1-4] You can Submit if the current Self-Signed Certificate is appropriated

[5-2] If you select Import Certificate :

[5-2-1] Import Certificate File (PKCS#12 format is required.)

[5-2-2] Type the Password 

[5-2-3] click Next

[6] Commit Changes 

[7] Navigate to CLI 

[8] type certconfig  

[9] type SETUP

[10] type 

Note: When the certificate is changed, administrative users who are currently logged in to the web user interface can experience a connection error and could lose un-submitted changes. This will occur only if the certificate is not already marked as trusted by the browser.

[11] type to select from available list of certificates

[12] Type the Number of desired Certificate

[13] if you intermediate certificate, and want to add them Type Y else type N  

Note: if you need to add the intermediate certificate you have to paste the intermediate cert in PEM format and end with '.'    (just dot).

[14] commit changes 

 

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++        If you find this answer helpful, please rate it as such      ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++

 

View solution in original post

2 Replies 2

Milos_Jovanovic
VIP Alumni
VIP Alumni

Hi @Mandeep singh5,

You can do this from CLI, by using certconfig command, and then follow the instructions.

Kind regards,

Milos

amojarra
Cisco Employee
Cisco Employee

Hello @Mandeep singh5 

Thanks for reaching out  

Kindly : 

[1] From the webUI under Network (in the top menu) 

[2] Select Certificate Management

[3] Under Appliance Certificates Select Add Certificate...

[4] Select Certificate Type (Self Signed Certificate or Import Certificate)

[5]

[5-1] If you select the Self-Signed Certificate:

[5-1-1] complete the fields 

Note: The Private key size must be in the range of 2048 to 8192.

[5-1-2] Click Next

[5-1-3] You can Download the CSR (Download Certificate Signing Request...) and Sign it with your organization's CA Server then Upload the Signed certificate and submit 

OR 

[5-1-4] You can Submit if the current Self-Signed Certificate is appropriated

[5-2] If you select Import Certificate :

[5-2-1] Import Certificate File (PKCS#12 format is required.)

[5-2-2] Type the Password 

[5-2-3] click Next

[6] Commit Changes 

[7] Navigate to CLI 

[8] type certconfig  

[9] type SETUP

[10] type 

Note: When the certificate is changed, administrative users who are currently logged in to the web user interface can experience a connection error and could lose un-submitted changes. This will occur only if the certificate is not already marked as trusted by the browser.

[11] type to select from available list of certificates

[12] Type the Number of desired Certificate

[13] if you intermediate certificate, and want to add them Type Y else type N  

Note: if you need to add the intermediate certificate you have to paste the intermediate cert in PEM format and end with '.'    (just dot).

[14] commit changes 

 

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++        If you find this answer helpful, please rate it as such      ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++