Which type of SSL cert do I need?

[stephenkeating]

Hello

I am about to get an SSL cert for my Firepower 1120 from GoDaddy. Which OS should I do this in, Apache, or which one?

Thanks

Stephen Keating

[Rob Ingram]

@stephenkeating you can generate the Certificiate Signing Request (CSR) on the FTD itself, then send this CSR to GoDaddy to sign, you then import the identity certificate to the FTD. https://www.cisco.com/c/en/us/support/docs/security-vpn/public-key-infrastructure-pki/215849-certificate-installation-and-renewal-on.html

Or alternatively you could use openssl to generate the CSR. This guide shows you how to use openssl to create a CSR for the FTD. https://integratingit.wordpress.com/2018/11/10/ftd-vpn-with-certificates/

[stephenkeating]

Thanks for the information. I have already created the openssl csr, but when I go on the GoDaddy site to generate the SSL, it asks which language or OS to produce it in. The choices are Apache, Microsoft, etc. Which one should I choose for the Firepower 1120?

[Rob Ingram · Accepted solution]

@stephenkeating select the server type as other, as per the example in this guide. https://www.cisco.com/c/en/us/support/docs/security-vpn/public-key-infrastructure-pki/200339-Configure-ASA-SSL-Digital-Certificate-I.html

[Marvin Rhoads]

The server type is just used for the provider (CA) to collect analytics information. No matter which type you select you will get the exact same x.509 certificate. For what it's worth, I tick the Apache box if it's required to give them something.

[stephenkeating]

Thanks for the information