How to Install Godaddy Certificate on ASA 5510

[OTHMAN KOUDY]

Do you know the procedure of import SSL certificate from Godaddy to ASA 5510? attached is the drop-down list that I have to choose from

Thanks,

[OTHMAN KOUDY]

Just wanted to mention that the CSR was not generated under ASA 5510

Thanks,

[rizwanr74]

Hi Othman,

Please see, the Cisco Doc, at below URL to install certificate on your ASA.

http://www.cisco.com/warp/public/471/verisign-install-asa.pdf

[OTHMAN KOUDY]

Hi Rizwan,

As I metioned before I didn't generate the CSR from the ASA. I'm using ASA 8.4(1). What I got from Godaddy is a zip file that contains 2 crt files if I choose "other" from the drop-down (see attachement)

gd_bundle.crt

domain.com.crt

Hope this will help.

Thanks,

[londonlinen]

i am stuck on same step. i have also same two files from goDaddy but no where to go? i read this blog.

http://serverfault.com/questions/32443/any-problems-usinga-godaddy-ssl-certificate-on-a-cisco-asa-firewall

[ryderse69]

Any luck with this? I am hitting the same issue.

I'm sure there's an answer here somewhere. I just don't see it yet.

Thank you,

-Steve

[AbsoluteTech]

Any updates on this?

I guess, it will be not only related to GoDaddy certificates but any other third-party certificate not acquired through ASA itself.

I have ASA and a Certificate from GoDaddy that I had bought before. Can I not use it? I want to avoid spending money twice on the same certificate just because Cisco ASA doesn't have a procedure of installing a third-party certificate.

[AbsoluteTech]

Found the solution here:

http://serverfault.com/questions/32443/any-problems-usinga-godaddy-ssl-certificate-on-a-cisco-asa-firewall

If you don't know where to get the .pfx file you can convert a .crt file to .pfx here:

https://www.sslshopper.com/ssl-converter.html

you need your certificate's private key for this. Or you can export the certificate from your original server (IIS7 in my case) - the server where you generated the request to get the certificate from GoDaddy. The request must be completed. Go to MMC -> Certificates -> Right click the certificate and export it with the private key