topic Re: EST Enrollment over Secure Transport in General Topics

EST Enrollment over Secure Transport

S.Key720011 — Thu, 02 Jan 2025 20:11:39 GMT

I use certificate based IPSec VPN Tunnels that rely on Certificates. The Certificate Authority i use supports EST to allow for automated enrollment similar to SCEP. Is there a way to configure Pan-OS to work with EST instead of SCEP? I have not been able to find any other forums to support this topic.

Re: EST Enrollment over Secure Transport

JayGolf — Thu, 09 Jan 2025 04:13:27 GMT

Hi @S.Key720011 ,

At the moment, PAN-OS does not natively support EST for certificate enrollment. However, there is an active Feature Request for this functionality. I recommend reaching out to your PAN SE to share your specific needs and requirements. Your SE can then vote for the FR on your behalf, which helps prioritize it for future development.