topic Re: S2S VPNs with Self-signed Certificates in General Topics

S2S VPNs using Self-signed Certificates

ET — Wed, 27 Aug 2025 20:51:32 GMT

What is the procedure for configuring Site-to-Site VPNs using self-signed certificates?

For example, we need to establish a VPN between Firewall A and Firewall B.

The documentation describes how to create a self-signed Root CA certificate, but it doesn’t explain the subsequent steps related to certificate handling, such as:

creating the certificates for Firewall A and Firewall B,
signing those certificates,
importing the keys for each firewall,
and clarifying exactly what should be imported to each firewall (Root CA, Root CA key, Firewall A certificate, Firewall B certificate, Firewall A key, Firewall B key).

Thanks in advance!

Re: S2S VPNs with Self-signed Certificates

TomYoung — Wed, 27 Aug 2025 18:20:45 GMT

Hi @ET ,

Just a few posts below yours was this one!

https://live.paloaltonetworks.com/t5/general-topics/how-to-configure-a-site-to-site-vpn-with-self-signed-certificate/td-p/311793

Thanks,

Tom

Re: S2S VPNs with Self-signed Certificates

ET — Wed, 27 Aug 2025 20:53:39 GMT

A have added some clarification to the original post with more accurate questions