Error on Panorama managed Primsa Gateway when using certificate profile

Claw4609 — Wed, 17 May 2023 20:04:15 GMT

We just spun up a panorama managed prisma access portal and gateway. Both the portal and gateway use either a certificate profile or saml for the authentication (the authentication on both the portal and the gateway match each other), however, when the certificate profile is attached to the gateway it returns a "Could not verify the server certificate of the gateway" error. The portal and gateway have the same certificate profile attached to them and you can log into the portal via certificate just fine.

We have on-prem gateways with certificate profiles attached and work just fine. Is there something else I need to do with it being a prisma gateway?

It looks like we're getting this error:

Failed to verify server certificate of gateway XXXXXXX.gw.gpcloudservice.com.
Show Gateway: Could not verify the server certificate of the gateway. If the issue persists, contact your administrator.
Failed to retrieve info for gateway XXXXXXX.gw.gpcloudservice.com.

Re: Error on Panorama managed Primsa Gateway when using certificate profile

nikoolayy1 — Sat, 01 Jul 2023 10:47:07 GMT

The Portal has an option to allow self signed certs and to ignore errors but the gateway does not, so maybe this is enabled.

https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/get-started/enable-ssl-between-globalprotect-components/globalprotect-certificate-best-practices

topic Re: Error on Panorama managed Primsa Gateway when using certificate profile in Prisma Access Discussions

Error on Panorama managed Primsa Gateway when using certificate profile

Re: Error on Panorama managed Primsa Gateway when using certificate profile