PAN-OS Certificate Expirations Clarification

MikeSchrader — Mon, 26 Feb 2024 14:20:29 GMT

With all the recent certificate update requests over the past couple months, the documents have become a bit confusing. Previously the below article stated version 10.1.11-h4 was a fix but now the article (updated 2/22/24) says version 10.1.11-h5 is the fix.

I recently upgraded our 820 and 3220 firewalls to 10.1.11-h4 and now I'm showing the root ca cert with the 2033 date.

> debug management-server panorama-root-ca-info

notAfter=Nov 19 23:27:22 2033 GMT

Later in 2024 I'll upgrade to version 10.2.7-h3 but in the interim I wanted to verify if there is anything else needed to meet the April 7th deadline?

https://live.paloaltonetworks.com/t5/customer-advisories/additional-pan-os-certificate-expirations-and-new-comprehensive/ta-p/572158

Re: PAN-OS Certificate Expirations Clarification

JayGolf — Mon, 26 Feb 2024 22:12:52 GMT

Hi @MikeSchrader ,

I've shared your post with the Q&A Team for the advisory.

topic Re: PAN-OS Certificate Expirations Clarification in General Topics

PAN-OS Certificate Expirations Clarification

Re: PAN-OS Certificate Expirations Clarification