Configure Certificate on SMA (IronPort(M670)) via CLI

Cisco, WSA / January 8, 2014
  1. SSH into the IronPort/SMA device
  2. Enter certconfig command
  3. Type SETUP
    cert-SMA1
  4. Y for yes to answer to “Do you want to use one certificate/key for receiving, delivery, HTTPS management access, and LDAPS? [Y]”
    cert-SMA2
  5. Follow the instruction to “paste cert in PEM format (end with ‘.’) :: This is referencing the PEM certificate –
    cert-SMA3
  6. Follow the instruction to “paste key in PEM format (end with ‘.’) :: This is referencing the PEM key of the above certificate –
    cert-SMA4
  7. Y if you want to add an intermediate cert or N if you do not.
    cert-SMA5
  8. Multiple intermediate certificate is permissible.
    cert-SMA6
  9. Returning to the original SETUP/PRINT/CLEAR marks the completion
    cert-SMA1
  10. Commit changes.