topic Re: Global Protect SCEP Certificate Username Format in GlobalProtect Discussions

Global Protect SCEP Certificate Username Format

PPonzeka — Fri, 17 Jul 2020 18:04:55 GMT

We have SCEP configured and working with our internal PKI. The connection works, except the user certificates get assigned to username%40domain.com instead of username@domain.com.

The Variable is set to CN=$USERNAME. It seems like its getting converted to html code for the @ symbol. Anyone seen this or any suggestions?

Re: Global Protect SCEP Certificate Username Format

khans — Thu, 30 Jul 2020 01:43:32 GMT

Which PanOS version are you running on the firewall?

As there is an issue reported in PanOS 9.0.4 with SCEP cert request showing URL encoded username i.e. (username%40domain.com). The issue should be resolved PanOS version 9.0.10

Let me know if that helps

Thanks,
Saad