Cisco
Login
Search
Software Secure Firewall Threat Defense
Platform Secure Firewall Threat Defense Virtual
Activity Onboard

Get Started Manage Objects Certificate Objects Generating Self-Signed Internal and Internal CA Certificates Procedure

Last updated: Jun 09, 2025

Procedure

This procedure generates a self-signed certificate by entering the appropriate certificate field values in a wizard. If you want to create an internal or internal CA certificate by uploading a certificate file, see Uploading Internal and Internal CA Certificates.

To generate a self-signed certificate, follow this procedure:

Procedure

1

In the Security Cloud Control platform menu, choose Products > Firewall.
2

Do one of the following:

  • Create the certificate object in the Objects page:

    1. In the left pane, click Manage > Objects.

    2. Click > FTD > Certificate.

  • Click Create New Object when adding a new certificate object to a policy.
3

Enter a Name for the certificate. The name is used in the configuration as an object name only, it does not become part of the certificate itself.
4

In step 1, select Internal Certificate or Internal CA.

5

In step 2, select Self-Signed to create the self-signed certificate in this step.

6

Configure at least one of the following for the certificate subject and issuer information.

  • Country (C)— Select the country code from the drop-down list.

  • State or Province (ST)— The state or province to include in the certificate.

  • Locality or City (L)— The locality to include in the certificate, such as the name of the city.

  • Organization (O)— The organization or company name to include in the certificate.

  • Organizational Unit (Department) (OU)— The name of the organization unit (for example, a department name) to include in the certificate.

  • Common Name (CN)— The X.500 common name to include in the certificate. This could be the name of the device, web site, or another text string. This element is usually required for successful connections. For example, you must include a CN in the internal certificate used for remote access VPN.
7

Click Add.
Previous topic Generating Self-Signed Internal and Internal CA Certificates Next topic About IPsec Proposals