topic Re: We're encountering a GlobalProtect error stating 'Certificate is not within its validity period,' despite this being a newly configured Palo Alto in GlobalProtect Discussions

We're encountering a GlobalProtect error stating 'Certificate is not within its validity period,' despite this being a newly configured Palo Alto setu

Glenyvie — Wed, 09 Jul 2025 04:27:57 GMT

We are currently setting up a PA-VM Firewall under the Alibaba Cloud Platform. However, we are encountering an issue with GlobalProtect. The client keeps showing an error stating that the certificate is not within its validity period, even though the certificate is valid until July 2026, as this setup was just recently provisioned.

We have already manually installed the certificate on the client devices, including the root CA, but the issue still persists.

#CertificateIssue

Re: We're encountering a GlobalProtect error stating 'Certificate is not within its validity period,' despite this being a newly configured Palo Alto

JayGolf — Sat, 12 Jul 2025 15:43:46 GMT

Hi @Glenyvie ,

Which GP client version are you running? Where did you get your cert from? I would double check to make sure the entire cert chain (root and any intermediate CAs) have correctly been imported into the firewall and the client machine (trusted root cert store). Id also verify the correct SSL/TLS profile is being referenced in the Portal and Gateway.

Re: We're encountering a GlobalProtect error stating 'Certificate is not within its validity period,' despite this being a newly configured Palo Alto

reaper — Tue, 15 Jul 2025 11:56:10 GMT

s this issue resolved itself in the meantime?

most commonly this issue happens when you have a brand new certificate and due to misconfiguration in the time of the firewall or client (no NTP, wrong timezone, wrong time or date,...) and the system thinks it has not reached the starting ValidFrom date&time on the certificate yet

setting up NTP everywhere and ensure the right timezone etc usually fixes this issue