Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

AIP-SSM-10 Module for Cisco ASA 5510


How can I update the expired certificate in AIP-SSM-10 Module using CLI or ASDM.....Here;s the output from the device....and also is there a way I can generate some daily or weekly reports in a graphs.


edge-s2# show version
Application Partition:

Cisco Intrusion Prevention System, Version 7.0(2)E4

    Realm Keys          key1.0
Signature Definition:
Signature Update      S613.0                   2011-12-16
OS Version:             2.4.30-IDS-smp-bigphys
Platform:                  ASA-SSM-10
Serial Number:          XXXXXXXXXX

Licensed, expires:      28-Jul-2012 UTC
Sensor up-time is 312 days.
Using 670720000 out of 1032495104 bytes of available memory (64% usage)
system is using 17.4M out of 38.5M bytes of available disk space (45% usage)
application-data is using 45.4M out of 166.8M bytes of available disk space (29% usage)
boot is using 41.6M out of 68.6M bytes of available disk space (64% usage)
application-log is using 123.5M out of 513.0M bytes of available disk space (24% usage)

MainApp            B-BEAU_2009_OCT_15_08_07_7_0_1_111   (Ipsbuild)   2009-10-15T08:09:06-0500   Running
AnalysisEngine     BE-BEAU_E4_2010_MAR_25_02_09_7_0_2   (Ipsbuild)   2010-03-25T02:11:05-0500   Running
CollaborationApp   B-BEAU_2009_OCT_15_08_07_7_0_1_111   (Ipsbuild)   2009-10-15T08:09:06-0500   Running
CLI                B-BEAU_2009_OCT_15_08_07_7_0_1_111   (Ipsbuild)   2009-10-15T08:09:06-0500

Upgrade History:

* IPS-sig-S555-req-E4       18:48:23 UTC Wed Mar 30 2011
  IPS-sig-S613-req-E4.pkg   22:30:02 UTC Wed Dec 21 2011

Recovery Partition Version 1.1 - 7.0(2)E4

Host Certificate Valid from: 28-Jul-2011 to 28-Jul-2012


VIP Purple

AIP-SSM-10 Module for Cisco ASA 5510

In IDM, the certificate can be renewed unter Configuration -> Sensor management -> Certificates -> Server Certificate.

On the CLI the command is "tls generate-key".

Sadly, the sensor doesn't support to be enrolled in an enterprise-PKI ... :-(

For your reports, look into the IME (IPS manager Express). There are some predefined reports and you can customize your own.

Don't stop after you've improved your network! Improve the world by lending money to the working poor: