One Certificate Profile with multiple certificates

TimothyL_MTS — Tue, 15 Apr 2025 23:18:16 GMT

Hello,

We have implemented the GlobalProtect. We are in the progress to migrate our PKI environment to new platform. One thing that I would like to test properly before we go ahead for the big band cutover, We are thinking to try this method "One Cert Profile with extra certificates"

In the Certificate Profile, we have configured using the current Root Cert. Is that possible for me to "Add" another Root Certificate that is from the new PKI infrastructure?

Will there be any affect to the existing VPN users? Thanks.

Re: One Certificate Profile with multiple certificates

JayGolf — Thu, 17 Apr 2025 04:25:57 GMT

Hi @TimothyL_MTS ,

As long as both CAs are valid and the client certs are correctly issued, existing users should not be impacted, and new users should be able to connect.

Hope this helps and please keep us posted on how it goes!

topic One Certificate Profile with multiple certificates in GlobalProtect Discussions

One Certificate Profile with multiple certificates

Re: One Certificate Profile with multiple certificates