I also recently updated the certificates on our C660s and am new to certificate management in general. It was a little bit painful as the documentation is so fragmented. I know there are probably 20 ways to accomplish this but rather than try to document all of them, just come up with one good way to do this and document it well. I did use the OpenSSL utility on a WinXP box and followed your instructions and was able to get the job done fairly easily.
But as your customers we will always want more, which is what you want.
The new version of AsyncOS 7.1.1-012 has lot of enhancements for certificates (generate CSR, Self-signed certs, Install signed certs via Web UI). Please take a look at the AsyncOS 7.1.1-012 release notes and User guide for additional information.
Hope this helps, if you have any feedback about this feature, please let us know.
Some of the enhancements that were mentioned were based upon feedback from customers. We are very open to any comments or suggestions for improvements to our product. If there are specific recommendations for enhancements or new features we encourage our customers to contact customer support so that we may open a feature request. Once the feature request is opened the information is passed on to the product development team who will then review the request and consider it for inclusion in a future release. This process is quite painless and only takes a few minutes. We would be happy to hear from you.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...