cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
678
Views
0
Helpful
2
Replies

WSA HTTPS Identity Certificate Upload Error

milin160791
Level 1
Level 1

Hi Team,

I want to perform HTTPS Decryption and also I would like to generate CA signed Identity certificate for my WSA. I am using Windows Server 2008 as my CA Server so firstly I have generated a CSR Request from WSA and uploaded that CSR into CA server to generate an identity certificate.

After generating an Identity certificate, I have uploaded into WSA. But, it is showing me below error. (Please find the attached screenshot)

Please suggest.

Thanks,

Milin M. Mistry

2 Accepted Solutions

Accepted Solutions

cisco-cco1
Level 1
Level 1

Hi Milin.

You need to make sure that you use the correct template to sign the CSR with. You need to use the Microsoft Subordinate CA template.

Best regards

View solution in original post

Thanks for reaching out Milin,  enclosing the step by step Video resource please review and let me/us know if you still have an issues.

Steps to configure HTTPS Proxy and CSR Option on Web Security Appliance:
https://www.youtube.com/watch?v=1g_96XYnkz4&feature=youtu.be


Steps to enable HTTPS proxy on (WSA) & Uploading Root/Intermediate certificate option.
https://supportforums.cisco.com/video/11932521/steps-enable-https-proxy-wsa-uploading-rootintermediate-certificate-option

Regards,

Zack

View solution in original post

2 Replies 2

cisco-cco1
Level 1
Level 1

Hi Milin.

You need to make sure that you use the correct template to sign the CSR with. You need to use the Microsoft Subordinate CA template.

Best regards

Thanks for reaching out Milin,  enclosing the step by step Video resource please review and let me/us know if you still have an issues.

Steps to configure HTTPS Proxy and CSR Option on Web Security Appliance:
https://www.youtube.com/watch?v=1g_96XYnkz4&feature=youtu.be


Steps to enable HTTPS proxy on (WSA) & Uploading Root/Intermediate certificate option.
https://supportforums.cisco.com/video/11932521/steps-enable-https-proxy-wsa-uploading-rootintermediate-certificate-option

Regards,

Zack