Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 27 subscribers
  • Views 3094 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How can I change the Default CA with an own CA certificate?

bene

I want to use my own CA; I create an subordinate ca certificate for the new sophos xg. I want to change the default ca with that but it seams that thats not possible.

Is there any chance to do that anyway?



This thread was automatically locked due to age.
  • 0

    Yes you can.


    Under certificates, Certificate Authorities you can upload your root CA, but do not include the private key.  You need to be able to build a trust relationship to the root CA, but you don't need to sign with it.
    Under certificates, Certificate Authorities you can upload your subordinate CA, and include the private key.  You need to be able sign with it so it needs the key.
     
    Under Web, General Settings, you should now have your subordinate CA selectable as a the scanning CA.
    https://community.sophos.com/kb/en-us/132997
     
    This shows one possible way of doing it, where you use a CSR to help you create the subordinate CA.  If you already have one, you can skip that part.
    https://community.sophos.com/kb/en-us/127885