Active and Standby ASAs configuration change

[captainbluff]

I currently have two ASAs configured as Active and Standby. I need to install CA certificates and apply them on the management interfaces of the ASAs as part of a network audit project. Will I be able to change configurations on one ASA at a time to generate the RSA keys and install the certs without harming the config synchronization on both ASAs?

[Richard Burts]

When you make config changes on the active member of a failover pair then the change is automatically sent to the standby member. If you really want to configure the ASAs separately then you need to remove the standby/failover configuration, make the changes separately, then re-configure standby/failover.

HTH

Rick

[captainbluff]

Thanks that makes sense.