After Apply SELF-SIGNED ECDSA CERTIFICATE IN SSL/TLS PROFILE Cannot Access to Management Interface

JiaXiang — Fri, 11 Mar 2022 17:41:33 GMT

I have a HA Firewall Active/Passive. Due to certificate is already expired I have exactly follow below guide to create my Self Sign ECDSA Certificate and apply it to my Passive firewall. The issue is when the passive firewall is in HA mode that time I`m unable to access to the management interface. When I make it as standalone mode that time there is no such issue.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boSoCAI

The error message is

This site can’t provide a secure connection
x.x.x.x uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Re: After Apply SELF-SIGNED ECDSA CERTIFICATE IN SSL/TLS PROFILE Cannot Access to Management Interface

S.Cantwell — Tue, 29 Mar 2022 00:31:31 GMT

Hello

Are you plugging directly into the Mgmt interface and getting this error, or are you connecting through the network (meaning, that there could be security policy or decryption policy that is breaking your connection).

topic After Apply SELF-SIGNED ECDSA CERTIFICATE IN SSL/TLS PROFILE Cannot Access to Management Interface in General Topics

After Apply SELF-SIGNED ECDSA CERTIFICATE IN SSL/TLS PROFILE Cannot Access to Management Interface

Re: After Apply SELF-SIGNED ECDSA CERTIFICATE IN SSL/TLS PROFILE Cannot Access to Management Interface