Download Cisco Certificate
Cisco Asa Export Certificate Form

SSL Certificate Installation Instructions for Cisco ASA 5510

Initial Instructions

I know you can export the ASA certificate from CLI amd ASDM. Not sure about CA cert though. You might want to check the cert mgmt section on the ASDM. If it is a public CA cert you should be able to download it from cert provider website or just google for it. I have a Cisco 5510 firewall and I am having trouble to find a way to export and import the configurations I made. I know ASA can save the configuration to a tftp server by using the command: copy flash tftp But how can I import the configuration? Thanks for the help. To install your SSL certificate on Cisco ASA 5010 perform the following. Step 1: Downloading your SSL Certificate & its Intermediate CA certificate: If you had the option of server type during enrollment and selected Other you will receive a x509/.cer/.crt/.pem version of your certificate within the email.

Please make sure you have completed the below checklist before starting the installation process.

Buy or Renew SSL Certificate.
Generate Certificate Signing Request (CSR).
Save the CSR & Private Key file in a secure place on the system as well on the server directory.
Submit the necessary documents as per your CA’s requirements.

Step 1: Download Certificate Files

After verification of your documents, the Certificate Authority will provide you SSL certificate bundle via email. This email contains a zip file which includes Primary, Intermediate, and Root certificate. Download and extract it on your Server.

In ASDM, go to Configuration >> Device Management.
Click on Certificate Management >> CA Certificate option.

Click on the Browse button and enter the location along with the path of the intermediate CA certificate file which you downloaded in the 1^st

Choose “Paste certificate in PEM Format”. (If you have any other format of the certificate file, convert it into .pem file using our SSL Converter Tool)
Paste the intermediate certificate in the text field.

Note: You should copy and paste the intermediate CA certificate file (yourintermediate_ca.txt) in the text field. Make sure to paste everything including —–BEGIN CERTIFICATE—– ,—–END CERTIFICATE—–, header, and footer.

A dialog/popup box will appear. It confirms that the installation was successful.

Click on Configuration >> Device Management.
Click on Certificate Management > Identity Certificates.
Choose the .pem formatted file which you created at the time of CSR generation.

Click on Install.
Enter the location and path of your SSL certificate file.

Choose Paste the certificate data in base-64 format
Paste the certificate in the text field.

Note: You can copy and paste the intermediate CA certificate (yourSSLcert.txt) into the text field. Make sure to paste —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—–, header, and footer.

Go to Configuration > Device Management.
Expand the Advanced option and then expand SSL Settings.

Under Certificates, choose the interface that is used to terminate WebVPN sessions.
Now, click on Edit.
In the Certificate drop-down list, select the certificate that you installed earlier.
Click on the OK

Cisco Support:

For more information, refer to Cisco ASA documentation.

Comodo Positive SSL

Download Cisco Certificate

RapidSSL Certificate

Comodo PositiveSSL Multi-Domain

$17.54 – 2 SAN Included

~~Vendor Price: $41.73~~

Coupon Code: ASCSCPMD4

For anyone else having this issue, I finally figured it out. I'm still not quite sure I understand all the different cert formats, but here's the steps I took. I used this link to help with a lot of the steps. https://www.experts-exchange.com/articles/14839/How-To-export-SSL-Certificate-from-Cisco-ASA-Cisco-A...

1. Browse to the existing website and view the certificate chain. From there you can download the intermediate and root certificates into a crt format.

2. Start with the exported p12 file and convert it into PEM format to get the private key and the identity certificate.

3. put the private key in it's own file with a .key extension.

4. remove the extra junk other than the certificate.

5. open the intermediate certificate and copy it below your identity certificate.

6. Open the root certificate and copy it below your intermediate certificate.

7. With all 3 certs back to back, save the file as a PEM file.

8. Use the link I used above to use openssl to create a new p12 file with all 3 certs, and the private key.

Cisco Asa Export Certificate Form

9. The article continues on for a WLC, but just import the p12 file into FMC and it's good to go.