Managing Self-signed Certificates

DP696 — Tue, 13 Sep 2022 06:55:01 GMT

As per the below link it's been mention that by default XSOAR uses self signed certificates for secure HTTP connection.

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-5/cortex-xsoar-admin/installation/post-installation-checklist/https-with-a-signed-certificate#:~:text=By%20default%20the%20server%20uses%20a%20self%2Dsigned%20certificate%20for%20a%20secure%20HTTP%20connection

I'd whish to know how Palo alto managing self-signed certificates for XSOAR, like what happens when it expire?. Is there any documentation available for that?

Thanks

Re: Managing Self-signed Certificates

jfernandes1 — Thu, 15 Sep 2022 03:51:23 GMT

Hi @DP696,

Once the self-signed certificate expires, you will need to create a new one. For instructions on how to replace refer - https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-9/cortex-xsoar-admin/high-availability/use-a-signed-certificate

You can create your own self-signed certificate. The below command is an example.

openssl req -newkey rsa:4096 -sha256 -days 3650 -out example.csr -keyout example.key

topic Re: Managing Self-signed Certificates in Cortex XSOAR Discussions

Managing Self-signed Certificates

Re: Managing Self-signed Certificates