topic Re: How to get PaloAlto to use Local CA certificate instead of self-signed certificate. in General Topics

How to get PaloAlto to use Local CA certificate instead of self-signed certificate.

shayes — Wed, 28 Jun 2023 19:25:01 GMT

On my network, I have a Windows Server CA, a Windows 10 box, and I PaloAlto box. The PA is currently running Software version 10.1.7. I have created a PA.csr and sent it to my CA server, and received my PA.cer w/o a private key. I have uploaded the PA.cer and the CARoot.cer to my PA box. It seems like no matter what I do, or configure, I cannot get the PA Box to use the CA cert I have uploaded, it uses the self-signed PA cert every time. Any chance someone can share a walkthrough for me, or share with me a step that I am missing to get the PA box to use my CA cert?

Thanks.

Re: How to get PaloAlto to use Local CA certificate instead of self-signed certificate.

rmfalconer — Wed, 28 Jun 2023 20:07:16 GMT

Besides importing it, did you bind that certificate anywhere? What are you trying to use it for?

Re: How to get PaloAlto to use Local CA certificate instead of self-signed certificate.

Claw4609 — Wed, 28 Jun 2023 20:08:19 GMT

Like the cert for the management GUI? Are you creating a ssl/tls service profile with the cert and then attaching that profile under Device>Setup>Management?