<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>article Nominated Discussion: Web-Gui Access With No Secure Certificate in General Articles</title>
    <link>https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-web-gui-access-with-no-secure-certificate/ta-p/511482</link>
    <description>&lt;P&gt;&lt;STRONG&gt;&lt;EM&gt;&lt;I data-stringify-type="italic"&gt;This article is based on a discussion,&lt;SPAN&gt;&amp;nbsp;&lt;A href="https://live.paloaltonetworks.com/t5/general-topics/web-gui-access-with-no-secure-certificate/m-p/291241" target="_self"&gt;Web-gui access with no secure certificate.&lt;/A&gt;,&lt;/SPAN&gt;&lt;/I&gt;&lt;I data-stringify-type="italic"&gt;&amp;nbsp;posted by&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/123281"&gt;@SaulGlz&lt;/a&gt;&amp;nbsp;&amp;nbsp;&lt;/I&gt;&lt;I data-stringify-type="italic"&gt;and answered by the Support Team.&lt;/I&gt;&lt;I data-stringify-type="italic"&gt;&amp;nbsp;Read on to see the discussion and solution!&lt;/I&gt;&lt;/EM&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;BLOCKQUOTE&gt;
&lt;P&gt;I access via GUI from Chrome and observe that the connection is not secure.&lt;/P&gt;
&lt;P&gt;I created the certificate for the firewall, but Chrome keeps saying that my connection is not secure.&lt;/P&gt;
&lt;P&gt;How can I solve this problem if the AC I have is internal to the company?&lt;/P&gt;
&lt;P&gt;Is there any way to generate certificates with AES-GCM?&lt;/P&gt;
&lt;P&gt;in chrome, the following legend appears to me.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image005.png" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21647iE066B8012A22FD92/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="image005.png" alt="image005.png" /&gt;&lt;/span&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image002.png" style="width: 445px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21648iE77E39E1D5131297/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="image002.png" alt="image002.png" /&gt;&lt;/span&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image006.png" style="width: 420px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21649iAF5F739146E3C4F6/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="image006.png" alt="image006.png" /&gt;&lt;/span&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image007.png" style="width: 420px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21650i7396F34262CADEF5/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="image007.png" alt="image007.png" /&gt;&lt;/span&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image009.png" style="width: 418px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21651iE005247BE75503A1/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="image009.png" alt="image009.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;/BLOCKQUOTE&gt;
&lt;H2&gt;&amp;nbsp;&lt;/H2&gt;
&lt;H2&gt;&lt;FONT color="#FF6600"&gt;&lt;STRONG&gt;Accepted Solution&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H2&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;BLOCKQUOTE&gt;
&lt;P&gt;Hi Team,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I was able to solve the issue by using below KB for adding SAN name in certificate&lt;/P&gt;
&lt;P&gt;&lt;A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CluVCAS" target="_blank" rel="noopener"&gt;https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CluVCAS&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Generated Self-Signed certificate in PA,then in certificate attributes add hostname and IP same as management address.&lt;/P&gt;
&lt;P&gt;Here hostname denotes as SAN name (Subject Alternative Name)&lt;/P&gt;
&lt;P&gt;Attach certificate to TLS Profile and that TLS profile to SSL/TLS management interface to login in GUI via TLS1.1/2&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Attached reference screenshot&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;/BLOCKQUOTE&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Wed, 10 Aug 2022 18:25:21 GMT</pubDate>
    <dc:creator>JayGolf</dc:creator>
    <dc:date>2022-08-10T18:25:21Z</dc:date>
    <item>
      <title>Nominated Discussion: Web-Gui Access With No Secure Certificate</title>
      <link>https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-web-gui-access-with-no-secure-certificate/ta-p/511482</link>
      <description>&lt;P&gt;&lt;STRONG&gt;&lt;EM&gt;&lt;I data-stringify-type="italic"&gt;This article is based on a discussion,&lt;SPAN&gt;&amp;nbsp;&lt;A href="https://live.paloaltonetworks.com/t5/general-topics/web-gui-access-with-no-secure-certificate/m-p/291241" target="_self"&gt;Web-gui access with no secure certificate.&lt;/A&gt;,&lt;/SPAN&gt;&lt;/I&gt;&lt;I data-stringify-type="italic"&gt;&amp;nbsp;posted by&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/123281"&gt;@SaulGlz&lt;/a&gt;&amp;nbsp;&amp;nbsp;&lt;/I&gt;&lt;I data-stringify-type="italic"&gt;and answered by the Support Team.&lt;/I&gt;&lt;I data-stringify-type="italic"&gt;&amp;nbsp;Read on to see the discussion and solution!&lt;/I&gt;&lt;/EM&gt;&lt;/STRONG&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 10 Aug 2022 18:25:21 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-web-gui-access-with-no-secure-certificate/ta-p/511482</guid>
      <dc:creator>JayGolf</dc:creator>
      <dc:date>2022-08-10T18:25:21Z</dc:date>
    </item>
  </channel>
</rss>

