Certificate Expiry

Sanjay_Ramaiah — Tue, 18 Jun 2024 12:46:47 GMT

Hi All,

I am trying to import the Azure SAML certificate to use it in the Identity Provider Certificate as it is expiring this Thursday. But i am getting the attached error. Does it mean do i need to delete the existing one and then import it? I have the Pem format and Base64 format but error is same when i import. Certificate extention is .cer.

Am i making anything wrong here? GP authentication will stop on Thursday so need quick help on this please.

Regards,

Sanjay S

Re: Certificate Expiry

kiwi — Thu, 20 Jun 2024 08:13:54 GMT

Hi @Sanjay_Ramaiah ,

I don't see any attached error. Could you provide more info ?

Steps to import a new Azure SAML certificate

Step 1 - Add a CA-Issued certificate as IdP Certificate on Azure AD

Generate a certificate using your enterprise Certificate Authority. Follow instructions from Azure AD to add a new CA-issued certificate https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/manage-certificates-for-federated-single-sign-on#create-a-new-certificate.

Please delete the old certificate before you export the IdP metadata to complete the next step.

Step 2 - Import metadata and enable Validate Identity Provider Certificate on PAN-OS

Ask your IdP administrator for IdP metadata. Import the IdP metadata into PAN-OS and/or Panorama and ensure that the Validate Identity Provider Certificate checkbox is enabled. Click OK. Create a Certificate Profile using the same CA certificate that has issued the IdPs certificate. Add the newly created IdP Server Profile and Certificate Profile to your SAML Authentication Profile. Commit the configuration to Panorama and/or the firewall.

Kind regards,

-Kim.

topic Re: Certificate Expiry in General Topics

Certificate Expiry

Re: Certificate Expiry