Cannot import signed certifcates in FIPS mode

AaronStow — Wed, 29 Mar 2023 14:29:14 GMT

When trying to import the signed cert in FIPS mode, error "import failed. Certificate chain cannot be validated, required CAs not found". This was a known issue that was supposedly fixed in PAN-OS 9.0.9 and PAN-OS 9.1.4, current version: 10.2.3-h2.

I was able to get this working in a lab environment without FIPS. Are there additional steps that I need to take when exporting and signing a cert in FIPS mode or is this bug still present in 10.2.3-h2?

This error occurs in the Panorama GUI, PA-460 GUI and PA-460 CLI.

topic Cannot import signed certifcates in FIPS mode in Next-Generation Firewall Discussions

Cannot import signed certifcates in FIPS mode