topic Re: Expired Certificate in Cortex XDR documentation in Cortex XDR Discussions

Expired Certificate in Cortex XDR documentation

KanwarSingh01 — Wed, 06 Apr 2022 05:22:21 GMT

Hi,

Just wondering if there is any reason why we need to keep the expired certificate on system for Cortex XDR.

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/get-started-with-cortex-xdr-prevent/set-up-endpoint-protection/enable-access-to-cortex-xdr

The ROOT CA for Global Sign is expired:

SHA1 Fingerprint— 75 E0 AB B6 13 85 12 27 1C 04 F8 5F DD DE 38 E4 B7 24 2E FE

Does Cortex still uses it and if there is any update on the certificate, can we please have documentation update and what is the new certificate which is to be installed on the systems?

Re: Expired Certificate in Cortex XDR documentation

bbarmanroy — Thu, 07 Apr 2022 01:17:59 GMT

Hi @KanwarSingh01 I am looking into this and will get back to you.

Re: Expired Certificate in Cortex XDR documentation

bbarmanroy — Fri, 08 Apr 2022 05:27:24 GMT

Hi @KanwarSingh01 this certificate might be in use for some older agent versions. YThe newer agents do not use these. In any case, the documentation is in the process of being updated to reflect the changes.

Re: Expired Certificate in Cortex XDR documentation

bbarmanroy — Thu, 14 Apr 2022 00:26:58 GMT

Hi @KanwarSingh01 the documentation has been updated - please see Step 3. Thank you for bringing this to our attention.

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/get-started-with-cortex-xdr-prevent/set-up-endpoint-protection/enable-access-to-cortex-xdr