Skip to main content



Cisco Defense Orchestrator

Exporting an Identity Certificate

You can export and import the keypair and issued certificates associated with a trustpoint in PKCS12 or PEM format. This format is useful to manually duplicate a trustpoint configuration on a different ASA.

To export an identity certificate, perform the following steps:

  1. In the navigation menu, click Devices & Services.
  2. Select the ASA device and in the Management on the right, click Trustpoints.
  3. Click the identity certificate to export the certificate configuration. Alternatively, you can search for the certificate by entering its name in the search field.
  4. In the Actions pane on the right, click Export Certificate.
  5. Choose the certificate format by clicking the PKCS12 Format or the PEM Format.
  6. Enter the encryption passphrase used to encrypt the PKCS12 file for export.
  7. Confirm the encryption passphrase.
  8. Click Export to export the certificate configuration.

An information dialog box appears, informing you that the certificate configuration file has been successfully exported to the location that you specified.

  • Was this article helpful?