How to Install & Renew SSL certificate on FTD managed by FMC

#sslcertificate
#ciscoftd
#renewsslcertificate
#installsslcertificate
#ssl
#fmc
This video describes how to install, trust, and renew self-signed certificates and certificates signed by a 3rd party Certificate Authority (CA) or internal CA on a Firepower Threat Defense (FTD) managed by Firepower Management Center (FMC).
---------------------------------------------------------------------------------------------------------------------------------------------------------
Step:1
openssl pkcs12 -export -out certificate.pfx -inkey _keyfilename_.key -in _signed certificate filename_.crt -certfile _ca cert filename_.crt
Example 1: openssl pkcs12 -export -out certificate.pfx -inkey ovation_key.key -in certificate.crt -certfile CACert.crt
Example 2:
openssl pkcs12 -export -out modifiedcertificate.pfx -inkey pkey.key -in remote_centric_com.crt -certfile DigiCertCA.crt
Step:2
Import above created .pkcs format certificate into Cisco ASA
-----------------------------------------------------------------------------------------------------------------------------------------
Cyber Security engineers can able to make use of my vlogs to understand and implement the configurations easily.
Click here to know more ---- t.ly/uN56
~-~~-~~~-~~-~
Please watch: "How to configure SAML authentication in Anyconnect using FMC | #saml authentication in Anyconnect"
• How to configure SAML ...
~-~~-~~~-~~-~

[@jesusleal6262]

Thank you for this video friend, we were having trouble importing a .PFX certificate to the FMC but we were getting the error "fail to configure ca certificate". The provider who issued us the .PFX file made it so it only included the Client Certificate and the Private Key in the PFX (the CA certificate was missing). So I asked them to send me the .KEY file and merged it with digicert's client and CA certificates into a new PFX file just like you did and it worked like a charm.

[@btechstuff]

Thanks for the video, sir!

[@tvandriod3051]

Video is nice, but your voice is very less and background music is dominating it, so little difficult to understand after some time.

[@secguru6104]

Thanks for the feedback, I will course correct that for sure!!

[@noobsniperxx]

Are you generating this from the FMC or FTD. The “system” is kind of vague.

[@secguru6104]

Can you be more specific with your question?

[@noobsniperxx]

@@secguru6104 are you on the FTD or FMC when doing the OpenSSL configuration

[@secguru6104]

@@noobsniperxx I have separate centOS server which acts for different purpose and I used that for here, Most of the Linux distributions come with OpenSSL pre-compiled

[@noobsniperxx]

@@secguru6104 thank you. I need to install an SSL cert for an FTD and this helped a lot. Will install OpenSSL on my Mac and Windows.

[@hariprasad-uw2yn]

In the OpenSSL CLI, you are entering file names from where those files are used. Where those files are stored.

[@jerm5768]

Does FTD support wildcard or multiple SAN entries for the SSL certificate?

[@secguru6104]

Yes, both.

[@sukantasaha2262]

We have 2 FTD and managed by fmc. So now do we need to import 2 internal CA cert or single internal CA ? We are planning to implement ssl decryption. Now we need to import internal CA. Please guide me sir.