topic Global Protect Intermediate Certificate Expiring in GlobalProtect Discussions

Global Protect Intermediate Certificate Expiring

Cmartineztech — Tue, 26 Oct 2021 17:48:38 GMT

Hello,

I have a certificate on my Global Protect configuration that will expire in 4 months. The root expires in 2031 while the intermediate expires in 2022. To renew the intermediate do I just click the renew option for that cert or do I need to submit a new CSR for this?

Re: Global Protect Intermediate Certificate Expiring

LAYER_8 — Tue, 26 Oct 2021 19:04:16 GMT

The process is pretty easy! Please see our guide here. There are limitations with this approach. However, I do see yours have external validation, which may complicate the process significantly, please see this thread.

Re: Global Protect Intermediate Certificate Expiring

Cmartineztech — Tue, 26 Oct 2021 19:17:54 GMT

Thanks for the info. And when submitting the CSR I'm being asked to choose IIS, Tomcat, or Apache... which web server type does Palo Alto use?

Re: Global Protect Intermediate Certificate Expiring

BPry — Wed, 27 Oct 2021 01:39:33 GMT

@Cmartineztech,

You would want to select Apache.