0

What are the correct steps to configuring an ASA5505 to be its own CA without a Microsoft CA being available and giving users the ability to self-enroll?

Specifically, I would like our ASA to use certificates for both VPN and SSL connections and I've managed to configure the Local Certificate Authority via ASDM but I cannot figure out what the URL the ASA uses for users to download their certificates is.

Also, do you need separate key pairs for VPN and SSL? Can you use certificates for SSH connections to the ASA?

Thank you in advance.

1 Answer 1

1

https://hostname/+CSCOCA+/enroll.html

This document may help:

ASA: Local CA Server configuration

1
  • Thank you. I did come across that document but for some reason I was getting a 404 error when trying to access the ASA through WebVPN. Then I realized that webvpn was not enabled on the outside interface. Would you happen to know the answer to the other questions? Thanks again!
    – Bourne
    Apr 6, 2011 at 20:08

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .