topic Certificate-Based Administrator Authentication to the Web not work on Passive node cluster in General Topics

Certificate-Based Administrator Authentication to the Web not work on Passive node cluster

Alpalo — Mon, 09 Oct 2023 13:58:57 GMT

Hello team,

I am configuring a new deployment, "

Configure Certificate-Based Administrator Authentication to the Web Interface"

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/firewall-administration/manage-firewall-administrators/configure-administrative-accounts-and-authentication/configure-certificate-based-administrator-authentication-to-the-web-interface#id3ec24be4-3aea-4ebd-8e2c-8928ae55fe53

ITs working fine for Node 1 but Node 2 is not working, both FW are on cluster ... any help for its works fine also on Node2?

Regards

Re: Certificate-Based Administrator Authentication to the Web not work on Passive node cluster

BPry — Tue, 10 Oct 2023 13:55:49 GMT

@Alpalo,

Because a cluster and HA peers are different things, can you confirm if we're talking about an actual HA Cluster or if we're simply talking about two HA members (Active/Passive or Active/Active config)? Additionally are you using the same CA certificate across both nodes when you generated the user certificates?

Re: Certificate-Based Administrator Authentication to the Web not work on Passive node cluster

Alpalo — Tue, 10 Oct 2023 14:39:56 GMT

Hello,

HA cluster Active // pasive ( 2 Hardware FW ), I tested with the same CA certificate across both nodes when I generated the user certificates and with a different certificate but the problems always is present..

thanks os much for your help,

Thanks

Regards

Re: Certificate-Based Administrator Authentication to the Web not work on Passive node cluster

Alpalo — Wed, 08 Nov 2023 15:20:33 GMT

Hello team,

Can anybody helps me? Any idea?

Regards