topic Individual certificate for per GP VPN users in General Topics

Individual certificate for per GP VPN users

ChandrashekharD — Fri, 26 Apr 2024 14:30:54 GMT

Hello Team,

We have a customer, his requirement is that he want to configure individual certificate for per global protect VPN user.

Please let us know is it possible to configure or not.

Regards,

Chandrashekhar

Re: Individual certificate for per GP VPN users

Claw4609 — Fri, 26 Apr 2024 15:21:15 GMT

Hello,

Wanting to hand out individual client certs? If so, yes you can do that via GlobalProtect via SCEP. Please see linked document blow. Let me know if that helps.

Deploy Certificates Using SCEP (paloaltonetworks.com)

Re: Individual certificate for per GP VPN users

Raido_Rattameister — Fri, 26 Apr 2024 15:23:13 GMT

Group Policy can enroll personal certs from enterprise PKI and install into computers.

GlobalProtect can configured to trust certs signed by enterprise CA.

If no internal CA then you can generate certs in Palo and install them manually into user laptops.