https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-client-certificate-with-oid-requesting-users-to/m-p/547029#M4164 <P>I recently configured my globalprotect agent to look for a machine certificate including a specific OID to avoid a confusing selection process on devices with multiple client certificates signed by the same CA. Our original configuration started requesting users to select which certificate to use. I wanted to avoid this confusion by including an OID so globalprotect knew exactly what certificate to use. Unfortunately, the users are still prompted to choose a certificate. However, they are now asked to choose the Intermediate certificate that signs the client cert. I'm wondering if the OID must be applied to the intermediate certificate, or is it possible I'm missing something here?<BR /><LI-PRODUCT title="GlobalProtect" id="GlobalProtect"></LI-PRODUCT> 6.1.1</P> Fri, 23 Jun 2023 15:48:04 GMT KAckerman12 2023-06-23T15:48:04Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-client-certificate-with-oid-requesting-users-to/m-p/547029#M4164 <P>I recently configured my globalprotect agent to look for a machine certificate including a specific OID to avoid a confusing selection process on devices with multiple client certificates signed by the same CA. Our original configuration started requesting users to select which certificate to use. I wanted to avoid this confusion by including an OID so globalprotect knew exactly what certificate to use. Unfortunately, the users are still prompted to choose a certificate. However, they are now asked to choose the Intermediate certificate that signs the client cert. I'm wondering if the OID must be applied to the intermediate certificate, or is it possible I'm missing something here?<BR /><LI-PRODUCT title="GlobalProtect" id="GlobalProtect"></LI-PRODUCT> 6.1.1</P> Fri, 23 Jun 2023 15:48:04 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-client-certificate-with-oid-requesting-users-to/m-p/547029#M4164 KAckerman12 2023-06-23T15:48:04Z