Cisco ASA 5505 Configuration Manual page 948

Working with Certificates in the Unified Communication Wizard
Click OK to close the dialog and return to the wizard.
Step 3
Submit the CSR to the certificate authority (CA), for example, by pasting the CSR text into the CSR
enrollment page on the CA website.
When the CA returns the signed identity certificate, rerun the Unified Communications Wizard. From
the client-side or remote-side certificate management step of the wizard, click Install ASA's Identity
Certificate. See
and
Engine Servers, page 42-21
Installing the ASA Identity Certificate on the Mobility Advantage Server
When configuring certificates for the Cisco Mobility Advantage Proxy, you must install the adaptive
security appliance identity certificate on the Cisco Mobility Advantage server.
Typically, a certificate authority returns two certificates: your signed identity certificate and the
certificate authority's certificate (referred to as the root certificate). However, some certificate
authorities (for example, VeriSign) might also send you an intermediate certificate.
The root certificate from the certificate authority is used to sign other certificates. The root certificate is
used by the adaptive security appliance to authenticate your signed identity certificate received from the
certificate authority.
If the certificate authority provided an intermediate certificate, you must enter the certificate text in the
Intermediate Certificate (If Applicable) area of the Install ASA's Identity Certificate dialog box.
For the Cisco Mobility Advantage Proxy, you install the root certificate in another dialog box. See
Installing a Certificate, page 42-18
In the Intermediate Certificate (If Applicable) area, perform on of the following actions:
Step 1
•
•
Step 2 In the ASA's Identity Certificate area, perform on of the following actions:
•
•
Click Install Certificate.
Step 3
Cisco ASA 5500 Series Configuration Guide using ASDM
42-20
Installing the ASA Identity Certificate on the Mobility Advantage Server, page 42-20
Installing the ASA Identity Certificate on the Presence Federation and Cisco Intercompany Media
for the steps to install the identity certificate.
To add a certificate configuration from an existing file, click the Install from a file radio button (this
is the default setting). Enter the path and file name, or click Browse to search for the file. Then click
Install Certificate.
To enroll manually, click the Paste the certificate data in base-64 format radio button. Copy and
paste the PEM format (base64 or hexadecimal) certificate into the area provided.
To add a certificate configuration from an existing file, click the Install from a file radio button (this
is the default setting). Enter the path and file name, or click Browse to search for the file. Then click
Install Certificate.
To enroll manually, click the Paste the certificate data in base-64 format radio button. Copy and
paste the PEM format (base64 or hexadecimal) certificate into the area provided.
Chapter 42
for the steps to install the root certificate.
Using the Cisco Unified Communication Wizard
OL-20339-01