topic Re: Global Protect VPN Device Certificates Expired in General Topics

Global Protect VPN Device Certificates Expired

ITCoordinator — Sun, 20 Feb 2022 08:19:28 GMT

Hi Guys,

I'm the first time to renew our GP VPN device certificates. But my certificates just expired today.

And I checked our old device certificates, it doesn't have the "CA".

When I renew it, do I need to import certificates ".pem" file or "pkcs12"? I don't want to change any current VPN configuration.

I have totally no idea how to do it. Thanks a lot!

Re: Global Protect VPN Device Certificates Expired

Basavaraj — Mon, 21 Feb 2022 07:28:15 GMT

Hi,

Read this below thread you have an answer

https://live.paloaltonetworks.com/t5/general-topics/my-global-protect-vpn-certificate-is-expiring-soon-how-to-renew/td-p/327935

Regards

Basavaraj

Re: Global Protect VPN Device Certificates Expired

ITCoordinator — Mon, 21 Feb 2022 08:18:38 GMT

Hi Basavaraj,

Yes. I saw this solution. My old certificates were purchased from RapidSSL. If I purchase new certificates (same domain) with new CSR/Private key from RapidSSL. Is it change other settings? My Global Protect VPN set in the AWS. Thanks.

Re: Global Protect VPN Device Certificates Expired

Basavaraj — Mon, 21 Feb 2022 08:58:23 GMT

Hi,

there are no settings going to be changed in the VPN configurations, you generate the new CSR and get it signed by your CA and bind the certificate with your CSR in the Palo alto firewall. after that, you can map it to your SSL/TLS profile and test it.

Regards

Basavaraj

Re: Global Protect VPN Device Certificates Expired

Basavaraj — Mon, 21 Feb 2022 10:56:28 GMT

Hi Kevin,

may I know what settings are you referring to?

There won't be any changes as long your VPN configuration is concerned, you have to map the new certificate in the SSL/TLS profile once you import the new certificate, only that is the change you will have to do as for as I know

Regards

Basavaraj

Re: Global Protect VPN Device Certificates Expired

Adrian_Jensen — Tue, 22 Feb 2022 16:42:52 GMT

"Kevin" appears to be a bot account posting generic replies to build reputation and post spam links. The forums have been overrun by them the last few days.... "Kevin's" new account has posted 5 times in the week since being set up, 4 of which were posted/edited to include credit/payment card spam/phishing links.

Re: Global Protect VPN Device Certificates Expired

Basavaraj — Tue, 22 Feb 2022 17:09:03 GMT

Hi Adrian,

Thank for you letting me know, I will be a little careful going forward

Regards

Basavaraj

Re: Global Protect VPN Device Certificates Expired

fusepriva — Mon, 18 Mar 2024 12:45:45 GMT

I saw this solution. My old certificates were purchased from RapidSSL.