Cisco ASA 5512-X Cli Configuration Guide

1-8
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Anonymous Reporting and Smart Call Home
Configuring Anonymous Reporting and Smart Call Home
Declaring and Authenticating a CA Trust Point
If Smart Call Home is configured to send messages to a web server through HTTPS, you need to
configure the ASA to trust the certificate of the web server or the certificate of the Certificate Authority
(CA) that issued the certificate. The Cisco Smart Call Home Production server certificate is issued by
Verisign. The Cisco Smart Call Home Staging server certificate is issued by Digital Signature Trust Co.
Detailed Steps
To declare and authenticate the Cisco server security certificate and establish communication with the
Cisco HTTPS server for Smart Call Home service, perform the following steps:
Step 1
changeto context admincontext
Example:
hostname(config)# changeto context contextA
(Multiple Context Mode only) Installs the certificate
in the admin context.
Step 2
crypto ca trustpoint trustpoint-name
Example:
hostname(config)# crypto ca trustpoint cisco
Configures a trust point and prepares for certificate
enrollment.
Note If you use HTTP as the transport method,
you must install a security certificate
through a trust point, which is required for
HTTPS. Find the specific certificate to
install at the following URL:
http://www.cisco.com/en/US/docs/switches/lan
/smart_call_home/SCH31_Ch6.html#wp10353
80
Step 3
enroll terminal
Example:
hostname(ca-trustpoint)# enroll terminal
Specifies a manual cut-and-paste method of
certificate enrollment.
Step 4
crypto ca authenticate trustpoint
Example:
hostname(ca-trustpoint)# crypto ca authenticate
cisco
Authenticates the named CA. The CA name should
match the trust point name specified in the crypto ca
trustpoint command. At the prompt, paste the
security certificate text.
Step 5
quit
Example:
hostname(ca-trustpoint)# quit
%Do you accept this certificate [yes/no]:
yes
Specifies the end of the security certificate text and
confirms acceptance of the entered security
certificate.

Cisco ASA 5512-X Specifications

General

Brand	Cisco
Model	ASA 5512-X
Category	Firewall
Language	English