topic Warnings in certificate. in Next-Generation Firewall Discussions

Warnings in certificate.

manuellara — Wed, 28 Feb 2024 21:50:47 GMT

Hello team:
From your support; by browser I get the following warnings "NET::ERR_CERT_COMMON_NAME_INVALID" subsequently ERR_SSL_KEY_USAGE_INCOMPATIBLE, this validating in chrome and microsoft edge. Consequently I do not login to the portal, but it is working, GP agents connect without problem.
The SSL/TLS profile, Min version "tlsv.1".o and max version "Max" protocols.

Greetings.

#NGFW

Re: Warnings in certificate.

iarobertson — Wed, 28 Feb 2024 21:53:51 GMT

Hello @manuellara - you need a new certificate with a CN matching the host name of your firewall, and as TLSv1 has been deprecated you should use TLSv1.2 minimum.

Re: Warnings in certificate.

Ravi_Jadav — Thu, 29 Feb 2024 10:38:02 GMT

Please also refer artical ( https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFoCAK ) although it is for the GP,, but it gives good idea about recommendation for certificate.