ASA SSL certficat after mayor upgrade (8.2 to 8.4)

[alig.norbert]

Hi there,

I'm planning an upgrade (8.2 to 8.4) on an ASA5510. There is an official SSL cert installed. Do the ASA keep it after the upgrade or do I have to renew it?

Thanks,

Norbert

Sent from Cisco Technical Support iPhone App

[Jennifer Halim · Accepted solution]

ASA will keep the certificate after the upgrade, there is no requirement to renew the certificate.

[paulstone80 · Accepted solution]

If you do lose the certificate, you should be able to get it re-issued by your CA, but you will have to generate a new CSR on the ASA first.

Just in case, I would export the certificate off the ASA with the private key before the upgrade. The ASA can install certficates in PKS12 (.pfx) format, so you wouldn't need to get the cert re-issued if you did this. It's also a good idea to keep a backup for DR situations.

HTH

Paul