Install a certificate using a PKCS12 file

Install a certificate using a PKCS12 file to enable secure authentication and encrypted communications on managed devices.

Procedure

Step 1

Select Devices > Certificates.

Step 2

Choose Add to open the Add New Certificate dialog.

Step 3

Choose a pre-configured managed device from the Device drop down list.

Step 4

Associate a certificate enrollment object with this device in one of the following ways:

  • Choose a Certificate Enrollment Object of the PKCS type from the drop-down list.
  • Click (+), to add a new Certificate Enrollment Object, see Add certificate enrollment objects.

Step 5

Select Add.

The CA Certificate and Identity Certificate status will go from In Progress to Available as it installs the PKCS12 file on the device.

Note
When you upload the PKCS12 file for the first time, the file is stored in Cloud-Delivered Firewall Management Center as part of the CertEnrollment object. For any failed enrollments due to a wrong passphrase or failed deployment, retry enrolling the PKCS12 certificate without uploading the file again. Also, whenever you modify the certificate enrollment object to permit overrides, you must update the Passphrase for the certificate for a sucessful enrollment. A PKCS12 file size should not be larger than 24K.

Once Available, click the magnifying glass to view the Identity Certificate for this device.

What to do next

The certificate (trustpoint) on the managed device is named the same as the PKCS#12 file. Use this certificate in your VPN authentication configuration.