https://live.paloaltonetworks.com/t5/next-generation-firewall/wildcard-certificate-gpvpn-certificates/m-p/572146#M2390 <P>You imported certificate or also updated SSL Profile under "Device &gt; Certificate Management &gt; SSL/TLS Service Profile"?</P> Mon, 08 Jan 2024 17:50:16 GMT Raido_Rattameister 2024-01-08T17:50:16Z https://live.paloaltonetworks.com/t5/next-generation-firewall/wildcard-certificate-gpvpn-certificates/m-p/572094#M2389 <P>Just imported new wildcard cert for firewall management GUI as the existing one is expiring soon. Certificate first imported to Panorama then pushed to Primary &amp; Secondary firewalls (Active-Standby). Certificate is showing valid for Panorama but not for primary and secondary firewalls. Do we need to restart any services for the new certificate to take effect ?&nbsp;</P> Mon, 08 Jan 2024 15:51:10 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/wildcard-certificate-gpvpn-certificates/m-p/572094#M2389 sony_stephen 2024-01-08T15:51:10Z https://live.paloaltonetworks.com/t5/next-generation-firewall/wildcard-certificate-gpvpn-certificates/m-p/572146#M2390 <P>You imported certificate or also updated SSL Profile under "Device &gt; Certificate Management &gt; SSL/TLS Service Profile"?</P> Mon, 08 Jan 2024 17:50:16 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/wildcard-certificate-gpvpn-certificates/m-p/572146#M2390 Raido_Rattameister 2024-01-08T17:50:16Z https://live.paloaltonetworks.com/t5/next-generation-firewall/wildcard-certificate-gpvpn-certificates/m-p/572152#M2391 <P>Yes, did. On browser, it says "not valid" but in cert details I can see the it is valid till Nov 2024.&nbsp;</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="sony_stephen_0-1704737100926.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/56338i9674AC4AD3A972EF/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="sony_stephen_0-1704737100926.png" alt="sony_stephen_0-1704737100926.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="sony_stephen_1-1704737151374.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/56339iBAE006392279D502/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="sony_stephen_1-1704737151374.png" alt="sony_stephen_1-1704737151374.png" /></span></P> <P>&nbsp;</P> Mon, 08 Jan 2024 18:06:02 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/wildcard-certificate-gpvpn-certificates/m-p/572152#M2391 sony_stephen 2024-01-08T18:06:02Z https://live.paloaltonetworks.com/t5/next-generation-firewall/wildcard-certificate-gpvpn-certificates/m-p/572193#M2392 <P>Certificate validity doesn't only look at the validity period. If you're using the same device cert on Panorama, Active and Standby, do they all have namespaces of the same length so the wildcard will match all of them?</P> Mon, 08 Jan 2024 22:57:56 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/wildcard-certificate-gpvpn-certificates/m-p/572193#M2392 rmfalconer 2024-01-08T22:57:56Z