How to use a Machine Cert with a Private Key for Global protect prelogon

E.Hartmann — Mon, 22 Apr 2024 17:41:12 GMT

Greetings,

We utilize our own PKI infrastructure so the certificates we want to use for prelogon are already in place. I am also new to this so it may be working as designed but having a hard time validating.

We have imported a rootCA into Strata Cloud Manager the resides in Trusted Root CA on windows

We have an Intermediate CA signed by the rootCA also imported into stata cloud manger that resides in Intermediate CA on windows

We have a cert profile containing both the certificates above with the user name field set to none.

All of our devices have a personal machine certificate signed by the Intermediate CA. How do I make sure we are utilizing this personal machine certificate for prelogon.

Re: How to use a Machine Cert with a Private Key for Global protect prelogon

mb_equate — Mon, 22 Apr 2024 23:22:07 GMT

If there's only one cert in the machine store, GP will use that cert. If you have multiple machine certs, you can enable certificate selection based on OID, it's all explained here How Does the App Know Which Certificate to Supply? (paloaltonetworks.com)

topic Re: How to use a Machine Cert with a Private Key for Global protect prelogon in GlobalProtect Discussions

How to use a Machine Cert with a Private Key for Global protect prelogon

Re: How to use a Machine Cert with a Private Key for Global protect prelogon