Cisco ASA: All-in-One Firewall, IPS, and VPN Adaptive Security Appliance

Chapter 17. Public Key Infrastructure (PKI)

This chapter covers the following topics:

• Introduction to PKI

• Enrolling the Cisco ASA to a CA using SCEP

• Manual (cut-and-paste) enrollment

• Configuring CRL options

• Configuring IPSec site-to-site tunnels using certificates

• Configuring the Cisco ASA to accept remote-access VPN clients using certificates

• Troubleshooting PKI

PKI is usually defined as a set of standards and systems whose main purpose is to verify and authenticate the validity of each party involved in a network transaction. This chapter starts with an introduction to PKI and then shows you how to configure, enroll, and troubleshoot the Cisco ASA with digital certificates.

Introduction to PKI

As previously mentioned, PKI is a security architecture that ...