https://live.paloaltonetworks.com/t5/next-generation-firewall/cie-cloud-identity-engine-deactivated/m-p/538333#M1127 <P>Could not understand why the CIE account was deactivated. It was setup to sync with Azure AD and one on-prem DC. And atleast one firewall was configured to use it.&nbsp;</P> <P>&nbsp;</P> <P>Is this caused by the 3 month certificates?</P> <P>Also are these certs meant to be renewed manually every 3 months? If so its very challenging to use CIE for on-prem infrastructure. Does anyone know better.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 447px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/49373i51FF6C06F335B0F7/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P> <P>&nbsp;</P> <P>User-ID was not much in use on that firewall so went unnoticed as it was only for test.&nbsp; Now we want to move forward but if this gets deactivated like that it can be an issue.</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Tue, 11 Apr 2023 23:00:36 GMT raji_toor 2023-04-11T23:00:36Z https://live.paloaltonetworks.com/t5/next-generation-firewall/cie-cloud-identity-engine-deactivated/m-p/538333#M1127 <P>Could not understand why the CIE account was deactivated. It was setup to sync with Azure AD and one on-prem DC. And atleast one firewall was configured to use it.&nbsp;</P> <P>&nbsp;</P> <P>Is this caused by the 3 month certificates?</P> <P>Also are these certs meant to be renewed manually every 3 months? If so its very challenging to use CIE for on-prem infrastructure. Does anyone know better.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 447px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/49373i51FF6C06F335B0F7/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P> <P>&nbsp;</P> <P>User-ID was not much in use on that firewall so went unnoticed as it was only for test.&nbsp; Now we want to move forward but if this gets deactivated like that it can be an issue.</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Tue, 11 Apr 2023 23:00:36 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/cie-cloud-identity-engine-deactivated/m-p/538333#M1127 raji_toor 2023-04-11T23:00:36Z