WSA appliance - Enable HTTPS proxy - uploading signed certificate error. CSR option

[reynaldolopeza]

Hi, I have two WSA appliances configured in explicit proxy mode and high availability.

I want to enable HTTPS proxy for HTTPS decryption, and I am using the CSR option to generate a certificate.

I cannot upload successfully the signed certificate the internal CA of the client provided me. I get the following error:

"Error    —    Certificate and key do not match."

The file generated is in PEM format.

What can be wrong?. Please your help with this issue.

Thanks in advance.

[Farhan Mohamed]

Hello Reynaldo,

Please find information below how to do it correctly, follow this from scratch:-

Steps to configure HTTPS Proxy and CSR Option on Web Security Appliance:
https://www.youtube.com/watch?v=1g_96XYnkz4&feature=youtu.be


Steps to enable HTTPS proxy on (WSA) & Uploading Root/Intermediate certificate option.
https://supportforums.cisco.com/video/11932521/steps-enable-https-proxy-...

#Please rate if it helps.