ASA 5510 CA Certificate

[pbxnkey]

I'm upgrading the RAM and flash on an ASA 5510. I will transferring the contents of the old flash to the new flash. I am going to do a copy flash and write to start-config (using a running-config backup that's on the flash card). Will the CA certificate and crypto keys also transfer over?

 

[baddos]

Yes, they are stored in the running-config. If you copy running-config flash:/somefile.txt then you will have the whole config and the certs.

 

[ADB100]

Be aware that there are hidden files on the internal compact flash card that holds the license key.
Use an external CF card reader to copy everything over.
Some info here:

http://www.gomjabbar.com/2011/05/16/removing-the-flash-memory-from-a-cisco-asa-5505/

Cheers
Andy

 

[pbxnkey]

I never thought of looking at the hidden files. I'll remember that for next time. The startup-config and the license file would have been useful.
I wound up copying the running-config that I stored in the flash to the startup-config.
The CA certs did copy over but did not work. Customer had to work with Cisco to reinstall.
That was good info on that site. Thx.