Global protect A valid client cert is required

gus0095 — Thu, 12 Dec 2024 13:04:10 GMT

Hi, we're having a couple of issues with users after our security team updated firewall and GP client to v6.2.6 whereby a few of them are getting the error message attached all of the sudden stating that a valid cert is required. We do not use OID and I suspect the client is just picking up the wrong cert but I cannot get the client to prompt user to re-select the cert again, only way I have found to do this is to re-install the GP client which is not ideal. Is there an 'easier' way to get the client to prompt user for cert selection? Thanks!

Re: Global protect A valid client cert is required

JayGolf — Tue, 17 Dec 2024 20:05:07 GMT

Hi @gus0095 ,

You can have them try clearing the ClientCert.cer .It should be in the/Users/user/Library/Application Support/PaloAltoNetworks/GlobalProtect directory for mac users. Also try clearing .dat files for GP

If it still persists, are the other certs that pop up still needed? Id look into removing if not needed.

topic Re: Global protect A valid client cert is required in GlobalProtect Discussions

Global protect A valid client cert is required

Re: Global protect A valid client cert is required