Cisco ASA 5505 Configuration Manual page 1392

Mapping Certificates to IPsec or SSL VPN Connection Profiles
Firewall Mode
Routed
•
Install Certificate
Use this dialog box to install a new CA certificate. You can get the certificate in one of the following
ways:
•
•
•
•
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Configure Options for CA Certificate
Use this dialog box to specify details about retrieving CA Certificates for this IPsec remote access
connection. The dialog boxes on this dialog box are: Revocation Check, CRL Retrieval Policy, CRL
Retrieval Method, OCSP Rules, and Advanced.
Revocation Check Dialog Box
Use this dialog box to specify information about CA Certificate revocation checking.
Fields
•
Cisco ASA 5500 Series Configuration Guide using ASDM
64-82
Security Context
Transparent Single
— •
Install from a file by browsing to the certificate file.
Paste the previously acquired certificate text in PEM format into the box on this dialog box.
Use SCEP—Specifies the use of the Simple Certificate Enrollment Protocol (SCEP) Add-on for
Certificate Services runs on the Windows Server 2003 family. It provides support for the SCEP
protocol, which allows Cisco routers and other intermediate network devices to obtain certificates.
SCEP URL: http://—Specifies the URL from which to download SCEP information.
–
Retry Period—Specifies the number of minutes that must elapse between SCEP queries.
–
Retry Count—Specifies the maximum number of retries allowed.
–
More Options—Opens the Configure Options for CA Certificate dialog box.
Security Context
Transparent Single
— •
The radio buttons specify whether to check certificates for revocation. The values of these buttons
are as follows:
Do not check certificates for revocation
–
Multiple
Context System
— —
Multiple
Context System
— —
Chapter 64 General VPN Setup
OL-20339-01