Cisco ASA Series Cli Configuration Manual page 943

Chapter 1 Configuring Digital Certificates
Figure 1-1
User Enrollment Webpage
for PKCS12 Users Certificate
Enrollment and Retrieval
Licensing Requirements for Digital Certificates
The following table shows the licensing requirements for this feature:
Model License Requirement
All models Base License.
Prerequisites for Local Certificates
Local certificates have the following prerequisites:
•
•
•
Prerequisites for SCEP Proxy Support
Configuring the ASA as a proxy to submit requests for third-party certificates has the following
requirements:
•
The Local CA
HTTP CRL retrieval
Make sure that the ASA is configured correctly to support certificates. An incorrectly configured
ASA can cause enrollment to fail or request a certificate that includes inaccurate information.
Make sure that the hostname and domain name of the ASA are configured correctly. To view the
currently configured hostname and domain name, enter the show running-config command. For
information about configuring the hostname and domain name, see the
Domain Name, and Passwords" section on page
Make sure that the ASA clock is set accurately before configuring the CA. Certificates have a date
and time that they become valid and expire. When the ASA enrolls with a CA and obtains a
certificate, the ASA checks that the current time is within the valid range for the certificate. If it is
outside that range, enrollment fails. For information about setting the clock, see the
Date and Time" section on page
AnyConnect Secure Mobility Client 3.0 or later must be running at the endpoint.
Licensing Requirements for Digital Certificates
ASDM and CLI
configuration and
management
Security Device
with Local CA
Configured
Local Database in flash memory
or Mounted external file system
1-1.
1-4.
Cisco ASA Series CLI Configuration Guide
(CIFS or FTP)
"Configuring the Hostname,
"Setting the
1-7