topic Re: accessing Panorma GUI in eve-ng lab environment, certificate issues with chrome in General Topics

accessing Panorma GUI in eve-ng lab environment, certificate issues with chrome

hfakoor2 — Wed, 11 Oct 2023 02:37:07 GMT

So i've set up some firewall images in eve-ng 10.0.4,

I dhcp'd the management interfaces, connectivity is fine everything working as expected,

except I can't access the GUI on my local host chrome browser

Giving me the error:

NET::ERR_CERT_COMMON_NAME_INVALID

so I can't access the GUI, and I read on some other post about changing the alternative name as potentially solving the issue: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CluVCAS

among other Live forum discussions.

And so i can't do that in the GUI, so i figured I would try CLI,

I tried adding a random name with the ip as the FQDN, as one of the LIVE posts this may fix the issue just to give it a try and I get the failed to insert error.

Can someone guide me on how to fix my problem?

Re: accessing Panorma GUI in eve-ng lab environment, certificate issues with chrome

hfakoor2 — Wed, 11 Oct 2023 02:48:11 GMT

Oh yeah and this,

So I'm thinking I need to actually set up some type of cert first which is the real issue at hand. How to do that via CLI?

Re: accessing Panorma GUI in eve-ng lab environment, certificate issues with chrome

hfakoor2 — Wed, 11 Oct 2023 02:56:37 GMT

And I'm getting syntax errors when trying to generate a cert...

Re: accessing Panorma GUI in eve-ng lab environment, certificate issues with chrome

hfakoor2 — Wed, 11 Oct 2023 03:28:00 GMT

So so i managed to set up the cert on the PA device with this CLI command:

equest certificate generate ca yes digest sha256 algorithm RSA rsa-nbits 2048 certificate-name PA9 name 192.168.56.136

however when trying to get to the GUI via web browser I get this error:

NET::ERR_CERT_COMMON_NAME_INVALID

so if anyone could guide me on this it would be awesome

Re: accessing Panorma GUI in eve-ng lab environment, certificate issues with chrome

hfakoor2 — Wed, 11 Oct 2023 03:42:39 GMT

I got it working just by typing http instead of https

I'm going to be posting some heavy scripting soon, and maybe rolling it up into a bigger program to post on my github, so if you're interested would like to follow along and to help me you can check out my upcoming posts and follow my github 🙂

Re: accessing Panorma GUI in eve-ng lab environment, certificate issues with chrome

TomYoung — Wed, 18 Oct 2023 12:43:23 GMT

Hi @hfakoor2 ,

Did you use an SSL/TLS Service Profile to attach the certificate to the web UI (Panorama > Setup > Management > General Settings > SSL/TLS Service Profile)?

Thanks,

Tom