Import an audit log client certificate into the Cloud-Delivered Firewall Management Center
Importing an audit log client certificate enables secure communication between the Secure Firewall Management Center and external systems during audit log transmission. This task verifies that you import the correct signed certificate and any necessary intermediate certificates for secure operations.
In a Secure Firewall Management Center high availability setup, you must use the active peer when importing the audit log client certificate. This procedure is relevant when configuring audit log security or after obtaining a new signed client certificate.
Before you begin
-
Obtain a signed audit log client certificate for the Cloud-Delivered Firewall Management Center.
-
Make sure you are importing the signed certificate for the correct Cloud-Delivered Firewall Management Center.
-
If the signing authority requires an intermediate CA, ensure you provide the certificate chain. The same CA must sign both the client certificate and the intermediate certificates.
Follow these steps to import an audit log client certificate into the Secure Firewall Management Center.
Procedure
Step 1 | On the Cloud-Delivered Firewall Management Center, choose . |
Step 2 | Click Audit Log Certificate. |
Step 3 | Click Import Audit Client Certificate. |
Step 4 | Open the client certificate in a text editor, copy the entire block of text, including the |
Step 5 | To upload a private key, open the private key file and copy the entire block of text, including the |
Step 6 | Open any required intermediate certificates, copy the entire block of text for each, and paste it into the Certificate Chain field. |
Step 7 | Click Save. |
The audit log client certificate and any required intermediate certificates are successfully imported into the Secure Firewall Management Center.