topic Re: Importing root certificate in Panorama 10.2.15 not working/ EDL hosting service. in General Topics

Importing root certificate in Panorama 10.2.15 not working/ EDL hosting service.

zGomez — Fri, 01 Sep 2023 11:24:26 GMT

Hi,

I have a strange issue i am trying to import the globalsign root certificate into panorama device template.

I am following this article (also doubt the global sign is needed because when i browse manualy to the EDL the url is singed by Google)

Configure the Firewall to Access an External Dynamic List from the EDL Hosting Service (paloaltonetworks.com)

I have upload the certificate but renamed it to .jpg you can just rename it to .cer to have a look or open it with Notepad. The format is correct.

When i try to import this in panorama i always get the error:

Import of EDL-SERVICE-HOSTING failed. Failed to find begining of certificate. Make sure certificate starts with BEGIN CERTIFICATE tag (there is also a spelling mistake in the error should be beginning to my knowledge)

When i upload the same cert directly onto the firewalls i have no issue.

Anybody experienced this issue with version 10.2.5 ?

CERT CONTENT:

Re: Importing root certificate in Panorama 10.2.15 not working/ EDL hosting service.

zGomez — Fri, 01 Sep 2023 11:35:41 GMT

Ok problem solved only work with Edge, chrome and firefox fail.

Re: Importing root certificate in Panorama 10.2.15 not working/ EDL hosting service.

armitchell — Mon, 26 Feb 2024 17:31:03 GMT

I wanted to reply that I had this issue "failed to find begining of certificate file" trying to import a PFX cert into Panorama on 11.0.3. Using Edge solved the issue. What is odd is that I had recently replaced a cert on 11.0.3 in using Firefox and that worked but importing a brand new certificate did not.

Re: Importing root certificate in Panorama 10.2.15 not working/ EDL hosting service.

RuslanLevenets — Sun, 26 May 2024 22:40:22 GMT

You can also try to use Incognito browser (of Chrome!) which works for us.

Assuming there's something with how the web server used by Palo for GUI works. From my memory they use ngnix.

So there might be something happening in the guts between the FW and the user's browser on that level but nobody looks into that because of the low priority.

Re: Importing root certificate in Panorama 10.2.15 not working/ EDL hosting service.

DijinPM — Mon, 01 Jul 2024 10:43:24 GMT

The error " Failed to find begining of certificate. Make sure certificate starts with BEGIN CERTIFICATE tag" is solved.
If you are in Edge browser, logout Panorama. Then open Chrome and login to Panorama and try import the certificate.

Re: Importing root certificate in Panorama 10.2.15 not working/ EDL hosting service.

Bell-ChrisRyan — Tue, 09 Jul 2024 18:32:09 GMT

Thank YOU! That worked for me too ZGomez on Panorama 10.2.8-h3. Chrome was not working, but Chromium based Edge certainly worked.

Re: Importing root certificate in Panorama 10.2.15 not working/ EDL hosting service.

John-Antonelli — Thu, 19 Dec 2024 19:20:25 GMT

Panorama-10.2.7-h18 --- Experienced same issue. Both Edge and Chrome Failed with same error. Cleared All browser history, cache, Cookies. Issue was then resolved issue on both Browsers.