certificates

[carl_townshend]

Hi all, when installing certs on my asa for site to site vpn, I have been sent 2, one is a ca cert and the other is a identity cert, my question is, what are they and what are they used for ?

[massimiliano.serafino]

Hi,

Identity cert is the certificate issued by a Certificate Authority (CA); this certificate is private...in other words is a digital identity of the user. But, for verifing the digital identity (identity certificate) and beign sure that the user is who he says, you must have the certificate of the Certification Authority that issued the identity certificate. The certificate of CA is public. In other words, for verifing an identity certificate issued by a CA (say CA1) you must have the CA1 cert.

When you install an identity certificate you must install CA cert also.

I hope this helps.

Best regards.

Massimiliano.