Cisco ASA 5505 Configuration Manual page 738

Configuring CA Certificate Authentication
Enter the path and file name, or click Browse to search for the file. Then click Install Certificate.
Step 4
To enroll manually, click the Paste certificate in PEM format radio button.
Step 5
Copy and paste the PEM format (base64 or hexadecimal) certificate into the area provided, then click
Step 6
Install Certificate.
To enroll automatically, click the Use SCEP radio button. The adaptive security appliance contacts the
Step 7
CA using SCEP, obtains the certificates, and installs them on the device. To use SCEP, you must enroll
with a CA that supports SCEP, and you must enroll via the Internet. Automatic enrollment using SCEP
requires that you provide the following information:
•
•
•
To display additional configuration options for new and existing certificates, click More Options.
Step 8
The Configuration Options for CA Certificates pane appears.
Step 9 To continue, see the
Editing or Removing a CA Certificate Configuration
To change or remove an existing CA certificate configuration, perform the following steps:
To change an existing CA certificate configuration, select it, and then click Edit.
Step 1
The Edit Options for CA Certificates pane appears. To change any of these settings, see the following
sections for procedures:
•
•
•
•
To remove a CA certificate configuration, select it, and then click Delete.
Step 2
Note
Cisco ASA 5500 Series Configuration Guide using ASDM
35-10
The path and file name of the certificate to be automatically installed.
The maximum number of minutes to retry certificate installation.The default is one minute.
The number of retries for installing a certificate. The default is zero, which indicates unlimited
retries within the retry period.
"Configuring CA Certificates for Revocation" section on page
"Configuring CRL Retrieval Policy" section on page 35-11
"Configuring CRL Retrieval Methods" section on page 35-12
"Configuring OCSP Rules" section on page 35-13
"Configuring Advanced CRL and OCSP Settings" section on page 35-13
After you delete a certificate configuration, it cannot be restored. To recreate the deleted
certificate, click Add to reenter all of the certificate configuration information.
Chapter 35 Configuring Digital Certificates
35-11.
OL-20339-01