GNS3 – Routers Lose their Certificates When Restarted
Nov17

GNS3 – Routers Lose their Certificates When Restarted

KB ID 0000955  Problem I was doing some work with PKI and routers today, and after spending ages enrolling all my routers for certificates, I thought I’d save my hard work and return to it later. When I started the project up again, I was less than happy all the devices certificates had ‘Disappeared’! Solution This is default behavior, to change this select Edit > Preferences > Dynamips > Locate...

Read More
Cisco PRSM – Replace the Certificate Using Microsoft Certificate Services
Nov17

Cisco PRSM – Replace the Certificate Using Microsoft Certificate Services

KB ID 0001023  Problem Cisco PRSM gives you the ability to import certificates into it, but like other Linux distros does not give you the tools to generate the actual certificate request. The documentation tells you to use OpenSSL to this. I was just about to fire up a CentOS box when I remembered I did something similar for VMware 5.5 not so long ago, would the same procedure work here? Yes it did, and it’s a lot easier than...

Read More
Cisco IOS – Enrolling for Certificates with NDES
Nov17

Cisco IOS – Enrolling for Certificates with NDES

KB ID 0000948 Problem To get your Cisco Router or Switch to enroll, and obtain a certificate from a Windows Server running NDES, this is the procedure you need to follow. Solution When dealing with certificates, it’s important that your device is maintaining the correct time. You can set this manually, but I’d recommend setting up NTP. Setting IOS Time (Manually and via NTP) 1. Choose either of the options below, (as...

Read More
Securing Cisco SSL VPN’s with Certificates
Nov17

Securing Cisco SSL VPN’s with Certificates

KB ID 0000335 Problem It’s been a while since I wrote a walk though on the Cisco AnyConnect/SSL VPN solution, and usually I secure these with Active Directory or simply using the local user database on the firewall. But what if you wanted to use certificates instead? Perhaps your users are too “technically challenged” to remember their passwords. Or you want to enable two factor authentication with...

Read More
Cisco ASA – Enrolling for Certificates with NDES
Nov17

Cisco ASA – Enrolling for Certificates with NDES

KB ID 0000948 Problem To get your ASA 5500 firewall to enroll, and obtain a certificate from a Windows Server running NDES, this is the procedure you need to follow. Solution When dealing with certificates, it’s important that your firewall is maintaining the correct time. You can set this manually, but I’d recommend setting up NTP. Cisco ASA – Configuring for NTP 1. Make sure the firewall can contact the NDES...

Read More