https://live.paloaltonetworks.com/t5/next-generation-firewall/china-can-t-get-device-certificate-on-pa440/m-p/616192#M4956 <P>Hi everyone, We are based in Shanghai and we encounter an issue to generate a device certificate. On the web interface, we don't have the "Get certificat" option&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Sauneuf_0-1730856124382.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/63811i7837A67FF787721A/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="Sauneuf_0-1730856124382.png" alt="Sauneuf_0-1730856124382.png" /></span></P> <P>And when i try to request via CLI, nothing happen with the cmd "request certificate fetch"</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Sauneuf_1-1730856248383.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/63812i82274C54DC19AA71/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="Sauneuf_1-1730856248383.png" alt="Sauneuf_1-1730856248383.png" /></span></P> <P>&nbsp;</P> <P>and i have a invalid syntax with "request certificate fetch opt 'opt number'"</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Sauneuf_2-1730856479672.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/63813iE168EF9D33C110C7/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="Sauneuf_2-1730856479672.png" alt="Sauneuf_2-1730856479672.png" /></span></P> <P>Thank in advance for your help</P> Wed, 06 Nov 2024 01:28:43 GMT Sauneuf 2024-11-06T01:28:43Z https://live.paloaltonetworks.com/t5/next-generation-firewall/china-can-t-get-device-certificate-on-pa440/m-p/616192#M4956 <P>Hi everyone, We are based in Shanghai and we encounter an issue to generate a device certificate. On the web interface, we don't have the "Get certificat" option&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Sauneuf_0-1730856124382.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/63811i7837A67FF787721A/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="Sauneuf_0-1730856124382.png" alt="Sauneuf_0-1730856124382.png" /></span></P> <P>And when i try to request via CLI, nothing happen with the cmd "request certificate fetch"</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Sauneuf_1-1730856248383.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/63812i82274C54DC19AA71/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="Sauneuf_1-1730856248383.png" alt="Sauneuf_1-1730856248383.png" /></span></P> <P>&nbsp;</P> <P>and i have a invalid syntax with "request certificate fetch opt 'opt number'"</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Sauneuf_2-1730856479672.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/63813iE168EF9D33C110C7/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="Sauneuf_2-1730856479672.png" alt="Sauneuf_2-1730856479672.png" /></span></P> <P>Thank in advance for your help</P> Wed, 06 Nov 2024 01:28:43 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/china-can-t-get-device-certificate-on-pa440/m-p/616192#M4956 Sauneuf 2024-11-06T01:28:43Z https://live.paloaltonetworks.com/t5/next-generation-firewall/china-can-t-get-device-certificate-on-pa440/m-p/616196#M4957 <P>Solution found :</P> <P>I created a security policy with allowing app "paloalto-shared-services"</P> Wed, 06 Nov 2024 02:16:47 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/china-can-t-get-device-certificate-on-pa440/m-p/616196#M4957 Sauneuf 2024-11-06T02:16:47Z