How to generate a CSR on Cisco ASA using CLI? CSR- (Certificate signing request)

How to generate a CSR on Cisco ASA using CLI? CSR- (Certificate signing request)

  June 30, 2018    Raj

---

First thing we need is an RSA key pair:

  crypto key generate rsa label SSL-Key modulus 1024 noconfirm

Create a trust-point

crypto ca trustpoint SSL-trustpoint
subject-name CN=10.197.222.147 ****** This is the IP address of my ASA. You might have an FQDN
  keypair SSL-Key **** Call the key pair under trustpoint.
  fqdn none
  enrollment terminal
!
crypto ca enroll SSL-trustpoint noconfirm




Type Yes and hit enter

Display Certificate Request to terminal? [yes/no]: yes

This generates your CSR:




All you need to do is copy this text and send to your certificate authority.