Cisco
Login
Search
Software Secure Access
Activity Manage

Cisco Secure Access Help Manage Certificates Manage SAML VPN Service Provider Certificate Rotation Procedure Activate a New VPN Service Provider Certificate

Last updated: Aug 20, 2025

Activate a New VPN Service Provider Certificate

You must update your Identity Provider (IdP) with the new Service Provider certificate before making this certificate active. You cannot roll back to the old certificate.

  1. Navigate to Secure > Certificates > SAML Authentication > Service Provider Certificates.
  2. For the VPN Service Provider certificate, click Activate on the new certificate to launch the activation modal.
  3. To activate a new VPN Service Provider certificate:

    1. Click the Download link to download the new VPN Service provider certificate.

    2. Update your IdP with this new certificate; see SAML Certificate Renewal Options for more information.

    3. Check the box that confirms you uploaded the new certificate to your IdP.

    4. Click Activate new certificate to confirm your choice.


       

      You must update your IdP before activating the certificate. Failure to do this will result in SAML user authentication and connection failures.
  4. Verify that the new certificate is Active in the VPN Service Provider certificates list.
Previous topic View Notifications About Expired Service Provider Certificates Next topic Manage SAML Certificates for Identity Providers