10-05-2023 11:18 PM
Hello All,
I would like to add Cisco WSA GUI Management self-signed certificate. Can anyone guide me how I can create and add an self-signed certificate so that I won't see not secure connection when I'm accessing Cisco WSA.
@amojarra @websecurity
Solved! Go to Solution.
10-06-2023 03:56 AM
Hello @Mandeep singh5
Thanks for reaching out
Kindly :
[1] From the webUI under Network (in the top menu)
[2] Select Certificate Management
[3] Under Appliance Certificates Select Add Certificate...
[4] Select Certificate Type (Self Signed Certificate or Import Certificate)
[5]
[5-1] If you select the Self-Signed Certificate:
[5-1-1] complete the fields
Note: The Private key size must be in the range of 2048 to 8192.
[5-1-2] Click Next
[5-1-3] You can Download the CSR (Download Certificate Signing Request...) and Sign it with your organization's CA Server then Upload the Signed certificate and submit
OR
[5-1-4] You can Submit if the current Self-Signed Certificate is appropriated
[5-2] If you select Import Certificate :
[5-2-1] Import Certificate File (PKCS#12 format is required.)
[5-2-2] Type the Password
[5-2-3] click Next
[6] Commit Changes
[7] Navigate to CLI
[8] type certconfig
[9] type SETUP
[10] type Y
Note: When the certificate is changed, administrative users who are currently logged in to the web user interface can experience a connection error and could lose un-submitted changes. This will occur only if the certificate is not already marked as trusted by the browser.
[11] type 2 to select from available list of certificates
[12] Type the Number of desired Certificate
[13] if you intermediate certificate, and want to add them Type Y else type N
Note: if you need to add the intermediate certificate you have to paste the intermediate cert in PEM format and end with '.' (just dot).
[14] commit changes
Regards,
Amirhossein Mojarrad
+++++++++++++++++++++++++++++++++++++++++++++++++++
++++ If you find this answer helpful, please rate it as such ++++
+++++++++++++++++++++++++++++++++++++++++++++++++++
10-06-2023 02:57 AM
Hi @Mandeep singh5,
You can do this from CLI, by using certconfig command, and then follow the instructions.
Kind regards,
Milos
10-06-2023 03:56 AM
Hello @Mandeep singh5
Thanks for reaching out
Kindly :
[1] From the webUI under Network (in the top menu)
[2] Select Certificate Management
[3] Under Appliance Certificates Select Add Certificate...
[4] Select Certificate Type (Self Signed Certificate or Import Certificate)
[5]
[5-1] If you select the Self-Signed Certificate:
[5-1-1] complete the fields
Note: The Private key size must be in the range of 2048 to 8192.
[5-1-2] Click Next
[5-1-3] You can Download the CSR (Download Certificate Signing Request...) and Sign it with your organization's CA Server then Upload the Signed certificate and submit
OR
[5-1-4] You can Submit if the current Self-Signed Certificate is appropriated
[5-2] If you select Import Certificate :
[5-2-1] Import Certificate File (PKCS#12 format is required.)
[5-2-2] Type the Password
[5-2-3] click Next
[6] Commit Changes
[7] Navigate to CLI
[8] type certconfig
[9] type SETUP
[10] type Y
Note: When the certificate is changed, administrative users who are currently logged in to the web user interface can experience a connection error and could lose un-submitted changes. This will occur only if the certificate is not already marked as trusted by the browser.
[11] type 2 to select from available list of certificates
[12] Type the Number of desired Certificate
[13] if you intermediate certificate, and want to add them Type Y else type N
Note: if you need to add the intermediate certificate you have to paste the intermediate cert in PEM format and end with '.' (just dot).
[14] commit changes
Regards,
Amirhossein Mojarrad
+++++++++++++++++++++++++++++++++++++++++++++++++++
++++ If you find this answer helpful, please rate it as such ++++
+++++++++++++++++++++++++++++++++++++++++++++++++++
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide