The following tasks must be completed before configuring certificate integration.

  • An external CA server must be set up and configured. If you want guidance as to the methodology of setting up an external CA, refer to the document Selecting Microsoft CA Deployment Models Overview. The CA must be an external Enterprise CA as opposed to a standalone CA since standalone does not allow for the configuration and customization of templates.
  • For IPSec, you must have a Cisco Adaptive Security Appliance (ASA) connected to your network.