topic Re: create a certificate user-id agent in General Topics

create a certificate user-id agent

RubensZolotujin — Sun, 07 May 2023 20:05:55 GMT

I'm having trouble generating a certificate to install on the user-id agent, to no avail.

Someone can give me the correct steps.

Please a need help to steps...

Re: create a certificate user-id agent

JayGolf — Mon, 08 May 2023 00:17:40 GMT

What is the file format of the certificate you used for the User-ID? The cert will need to include the private key as well. A PEM and PKCS12 should work well.

Re: create a certificate user-id agent

RubensZolotujin — Mon, 08 May 2023 11:48:05 GMT

Hello JayGolf,

I am having trouble creating the certificate on the firewall correctly, as I have seen in a few documentations it is not very helpful, not very didactic, and exporting, exporting as PEM.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cla8CAC

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFoCAK

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGFCA0&lang=en_US

This last link brings the information, but as we see in all documents not the steps to create the certificate, I have tried several forms for and creating but according to this document I have no success.

I have searched in several places here on the forum and in the KB's I have had no success, can someone point me to a document that has the steps correctly.

Thanks!

Rubens Zolotujin

Re: create a certificate user-id agent

KhaleelE — Wed, 13 Sep 2023 19:51:13 GMT

Hi,

I also have same error.When i try to generate certificate on shared vsys. Its showing only on vsys 4 not shared. I have created with superuser account. Any solution to create certificate for shared vsys.

Re: create a certificate user-id agent

KhaleelE — Thu, 14 Sep 2023 08:43:47 GMT

Hi @RubensZolotujin Are you trying to install the RootCA certificate?

Do you have vsys in your firewall?

Re: create a certificate user-id agent

RubensZolotujin — Wed, 27 Mar 2024 16:17:40 GMT

yes you must install the root certificate of your active directory, root > below the certificate generated in AD will be attached