安全 : 思科内容安全管理设备

如何安装在SMA的证书?

2016 年 10 月 24 日 - 机器翻译
其他版本: PDFpdf | 英语 (2016 年 4 月 21 日) | 反馈

简介

本文描述如何安装在安全管理设备(SMA)的证书。

由思科 TAC 工程师撰稿。

先决条件

SMA不支持一证书的生成直接地在设备。您将需要生成从ESA的自签名证书按照如何生成和安装在SMA的一数字证书说明

您必须有这些项目可用在PEM格式:

  • X.509 证书
  • 匹配您的证书的专用密钥
  • 您提供的任何半成品证书认证机关

证书可以用于四不同服务:

  • 入站TLS
  • 出站TLS
  • HTTPS
  • LDAP

注意: 您能选择到使用所有四服务或使用分开的证书的同一证书其中每一的。

安装证书

为了开始,您首先将需要通过CLI访问您的SMA。这可以通过telnet或一个SSH客户端执行例如PuTTY。

一旦登录CLI,完成这些步骤:

  1. 发出certconfig命令。
  2. 发出setup命令
  3. 是否选择使用同一证书所有功能或分离证书。
  4. 当提示,请粘贴每个项目到CLI窗口。
  5. 输入‘’。独自地线路为了表明执行粘贴当前项目的您(参见“示例”部分)。
  6. 请务必输入所有半成品证书,当提示如此执行。
  7. 当您执行时,请按回车为了返回到主要提示。
  8. 发出commit命令

注意:当您执行在Microsoft Windows时的一个证书安装,您也许需要打开您的与Wordpad或Notepad++的证书,而不是Notepad。

注意: 因为这立即取消您的更改,请勿退出与Ctrl+C的certconfig命令。

示例

sma.example.com> certconfig

Currently using one certificate/key for receiving, delivery, HTTPS management
access, and LDAPS.

Choose the operation you want to perform: 
     - SETUP - Configure security certificates and keys.
     - PRINT - Display configured certificates/keys.
     - CLEAR - Clear configured certificates/keys.
[]> setup

Do you want to use one certificate/key for receiving, delivery, HTTPS management
access, and LDAPS? [Y]>

paste cert in PEM format (end with '.'):
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
.
cert = -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
paste key in PEM format (end with '.'):
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
.
key = -----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

Do you want to add an intermediate certificate? [N]> n

Currently using one certificate/key for receiving, delivery, HTTPS management
access, and LDAPS.

Choose the operation you want to perform:
     - SETUP - Configure security certificates and keys.
     - PRINT - Display configured certificates/keys.
     - CLEAR - Clear configured certificates/keys.
[]>
sma.example.com> commit

Please enter some comments describing your changes:
[]> Installed Certificate

Changes committed: Fri Oct 02 12:50:47 2009 MST

相关信息



Document ID: 118460