Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 26 subscribers
  • Views 10869 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

CSR created, where to download?

AndréAegerter

Hi all


I have created a CSR, but under the point System/ Certificates/ Certificates are nothing, why?
The hourglass (Mouse Pointer) rotates easily until 2 Seconds, but nothing happens. The input mask for the CSR does not disappear after the Save?!

- I use the Firmware SFOS 16.05.5 MR-5
- and i use different Web Browsers such as Edge or Firefox.

By the way, my Target: Windows CA import for signing and issuing Certificates.
Currently I have installed a Windows Root CA, an intermediate CA which is AD integrated and this Sophos CA (intermediate CA).
I could then issue Certificates for example, an SSL certificate for the Management access (Sophos Webadmin utm.xy.ch:4444).

Upgrade: i had now installed a Windows CA (converted a .pfx File to a Cert and Private Key, because Sophos XG Firewall can't import a .pfx File, Sophos UTM already)
Now, i have still the same Problem. 

 


This thread was automatically locked due to age.
Parents
  • 0

    AndréAegerter,

    once you have created the CSR, in the same Certificate tab, next to the CSR you have generated, there is a small icon (download). Upload the CSR inside to your CA, have it signed and then upload the certificate and private key inside the Certificate TAB on XG.

  • 0 in reply to lferrara

    Hi Iferrara

    Thank you for your opinion.
    Pictures say more than thousand words :-) So now you have three images, however, supplemented with a few words.
    By the way: You can see in a case of a image that the point of Generate-self-signed certificate is inactive, by the way, probably not correct?

    So, what's next?

    cheers
    Andrew

  • 0 in reply to AndréAegerter

    AndréAegerter,

    Ttry to regenerate the CA. Go to Certificate Authority, next to default CA click the pencil, change one Field (city for example) and save.

    Then go back to Appliance certificate and re-generate it.

    Logout and login to XG and try to generate the CSR. Now even the 2 option should be available.

    Regards

Reply
  • 0 in reply to AndréAegerter

    AndréAegerter,

    Ttry to regenerate the CA. Go to Certificate Authority, next to default CA click the pencil, change one Field (city for example) and save.

    Then go back to Appliance certificate and re-generate it.

    Logout and login to XG and try to generate the CSR. Now even the 2 option should be available.

    Regards

Children