topic Upcoming November 18, 2024 Deadline for NGFW User-ID and Terminal Server (TS) Agent Certificate Expiration in Next-Generation Firewall Discussions

Upcoming November 18, 2024 Deadline for NGFW User-ID and Terminal Server (TS) Agent Certificate Expiration

notimben — Mon, 11 Nov 2024 12:46:45 GMT

Hello,

trying to figure out the user-id thing, and if we are affected.

Referring to text in the screen shot below - how does that system log message look like ? and should have been showed after the install of 8912-9060 update ?

Re: Upcoming November 18, 2024 Deadline for NGFW User-ID and Terminal Server (TS) Agent Certificate Expiration

zahmed01 — Mon, 11 Nov 2024 17:09:57 GMT

Hello,

The system log should look something like this:

"Updates required for NGFW customers of User-ID by November 18, 2024. Review the updated advisory to ensure you have taken the required actions."

For information on the User ID Cert issue feel free to follow these steps from the FAQ on the main advisory:

User-ID FAQS

1. Are there any automation tools available to show the status of the User-ID and Terminal Server (TS) agent Self-signed Certificates in my environment?

An open-source userid-check tool is available on github to determine the PAN-OS Version and User-ID/Terminal Server Agent Version currently running on your Palo Alto Networks devices and UserID/Terminal Server Agents. The primary objective is to ensure that your devices operate on a PAN-OS and Agent version unaffected by the expiration of certificates on November 18th, 2024. Please note, that this tool is released "as-is" with no warranty or support. This is a community supported tool and Palo Alto Networks may contribute its expertise at its discretion.

Re: Upcoming November 18, 2024 Deadline for NGFW User-ID and Terminal Server (TS) Agent Certificate Expiration

notimben — Tue, 12 Nov 2024 09:56:37 GMT

Thanks . If i dont find that message - does that mean that i dont have to do something ? That is my understanding reading the advisory at least

Re: Upcoming November 18, 2024 Deadline for NGFW User-ID and Terminal Server (TS) Agent Certificate Expiration

Camramirez — Thu, 14 Nov 2024 20:54:33 GMT

Thanks, that tool is perfect, I verified that the upcoming NGFW User ID Agent and Terminal Server certificate expiration date of November 18, 2024, does not affect us.