How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.
Solved
Can't install 3rd Party SSL into Cisco ASA 5505
Posted on 2014-11-11
Hello all
I have a Cisco ASA 5505 , running ASA Version 8.3(1), and ASDM version 6.3(1)
I cannot install a 3rd party (GoDaddy/Starfield tech) SSL certificate for the life of me.
Generating the CSR from the ASA itself I get "Failed to parse or verify imported certificate" even though the starfield specific root and intermediate certificates seem to install fine.
Someone in the Cisco support forums suggested generating the CSR from a windows computer, installing the cert on windows computer, and then exporting out to PKCS12 (.pfx), then importing into ASA afterward.
I'm met with Error Import PKCS12 operation failed.
I have a Cisco ASA 5505 , running ASA Version 8.3(1), and ASDM version 6.3(1)
I cannot install a 3rd party (GoDaddy/Starfield tech) SSL certificate for the life of me.
Generating the CSR from the ASA itself I get "Failed to parse or verify imported certificate" even though the starfield specific root and intermediate certificates seem to install fine.
Someone in the Cisco support forums suggested generating the CSR from a windows computer, installing the cert on windows computer, and then exporting out to PKCS12 (.pfx), then importing into ASA afterward.
I'm met with Error Import PKCS12 operation failed.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
2
3 Comments
Your best bet is to create the certificate request on the ASA. Here are some straightforward instructions for using the ASDM to create a certificate request. You will want to be sure to change the CN value to your match your DNS record.
https://www.digicert.com/csr-creation-cisco-asa-vpn.htm
https://www.digicert.com/csr-creation-cisco-asa-vpn.htm
Darkstriker69
Thanks for that info. I did see that before. Originally I did generate CSR from ASA itself, but had some much trouble I was willing to entertain generating it from elsewhere.
My problem was two fold
1. Needed to be SHA-1 , and not SHA-2. My best guess is because of the old ASA code ( 8.3.1)
2. Secondly, the SSL I bought was for 3 years, but the Intermediate cert and root cert I guess are only good for 2.
Thanks for that info. I did see that before. Originally I did generate CSR from ASA itself, but had some much trouble I was willing to entertain generating it from elsewhere.
My problem was two fold
1. Needed to be SHA-1 , and not SHA-2. My best guess is because of the old ASA code ( 8.3.1)
2. Secondly, the SSL I bought was for 3 years, but the Intermediate cert and root cert I guess are only good for 2.
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
Examines three attack vectors, specifically, the different types of malware used in malicious attacks, web application attacks, and finally, network based attacks. Concludes by examining the means of securing and protecting critical systems and inf…
Compliance and data security require steps be taken to prevent unauthorized users from copying data. Here's one method to prevent data theft via USB drives (and writable optical media).
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data.
But that feeling is fleeting. Attacks these days can happen in many w…
Suggested Courses
Course of the Month11 days, 2 hours left to enroll
718 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.