Network Wizkid's Technical Knowledge Base

In this article I want to demonstrate how too add signed certificates to the Firepower Management Center (FMC) using the CLI. If you've worked with the FMC for some time, you'll know that the GUI can be quite limited when it comes to the sort of information you enter before generating a CertificateCSR. In fact a particular use case for wanting to use the CLI to generate CSR's for the FMC is when you want to issue the same certificate to more than one FMC. As it stands today there isn't a way to accommodate this use case via the GUI an although possible, this request can only be fulfilled by using the CLI. With that, in this article we will focus on how we can fulfill the mentioned requirement and have one certificate issued for more than one FMC. We will have our internal CA (Microsoft Server) issue an internal signed certificate that will be imported to both FMC's. Demonstration Hardware & Versions Microsoft Server 2019 (CA Server) Firepower Management Center v...

In this article we will take a look at how to generate a Certificate Signing Request (CSR) for your Firepower Management Centre (FMC) before taking a look at how we then complete the request and install the CA-signed certificate. In order to complete the above, you will need access to the following: FMC with Admin rights CA Server with Admin rights The following hardware and software is used for this demonstration: FMCv version 6.5 Microsoft Server 2019 Generate the CSR on the FMC 1. Once logged into the FMC, navigate to System > Configuration > HTTPS Certificate 2. Click 'Generate New CSR' 3. Enter the relevant details for your organization. The device name should already be pre-populated within the Common Name field. Once the fields are populated, click 'Generate' . 4. When the box appears with the Base-64 Encoded CSR, copy the text into a notepad. 5. With access to your CA-Server, access the relevant location where certificates are generated. In this example w...