topic Re: Failure to Delete a Certificate in General Topics

Failure to Delete a Certificate

bdunbar — Wed, 24 Sep 2014 21:05:17 GMT

PA-200

PAN 6.01

I imported a certificate, but failed to do something correctly. I wanted to delete the cert, and start over. When I select the certificate 'ServicesVPN' and click Delete I'm told ...

1- Failed to delete Certificate - ServicesVPN.

° ServicesVPN cannot be deleted because of references from:

° deviceconfig -> system -> syslog-certificate

I'm at a bit of a loss where to system > syslog-certificate reference is. Help ...

Re: Failure to Delete a Certificate

bat — Wed, 24 Sep 2014 21:10:42 GMT

Hi bdunbar

I think your syslog server profile (Device > Server Profiles > Syslog) must have the transport method set as SSL, that's why the above error.

Try changing/deleting the above and it should fix the issue

Thanks

Re: Failure to Delete a Certificate

bdunbar — Wed, 24 Sep 2014 21:13:14 GMT

Nope - nothing there. This is a new install, new infrastructure: I haven't pointed it at the syslog server yet.

Re: Failure to Delete a Certificate

HULK — Wed, 24 Sep 2014 21:21:59 GMT

Hello bdunbar,

If you are using SSL for your syslog connection, then it requires a client certificate. Please make sure that the certificate, which is enabled for "Certificate for Secure Syslog".

The FW will not allow you to delete, since this refers to SYSLOG certificate.

For example:

Thanks

Re: Failure to Delete a Certificate

bat — Wed, 24 Sep 2014 21:23:52 GMT

bdunbar

Could you please try the following command from CLI:

delete deviceconfig system syslog-certificate

Then try the commit and see if that succeeds.

Thanks

Re: Failure to Delete a Certificate

ssharma — Wed, 24 Sep 2014 21:25:49 GMT

Hi Bdunbar,

If you are trying to delete the cert, then simply uncheck the Syslog option for the cert. Then delete it. It should work. Hope this helps.

Re: Failure to Delete a Certificate

bdunbar — Wed, 24 Sep 2014 21:32:36 GMT

Okay ..

admin@PA-200> delete deviceconfig system syslog-certificate

Invalid syntax.

admin@PA-200

Re: Failure to Delete a Certificate

bdunbar — Wed, 24 Sep 2014 21:34:05 GMT

It is not checked.

Re: Failure to Delete a Certificate

HULK — Wed, 24 Sep 2014 21:36:07 GMT

Hello bdunbar,

Could you please go to Device > Certificate Manangement > Certificate and open the certificate and uncheck that option "Certificate for Secure Syslog".

or try this from CLI: admin@PA-3020# delete deviceconfig system syslog-certificate

Thanks

Re: Failure to Delete a Certificate

ssharma — Wed, 24 Sep 2014 21:37:03 GMT

You will need to go to configuration mode

admin@PA-200> configure

admin@PA-200# delete deviceconfig system syslog-certificate

Re: Failure to Delete a Certificate

bat — Wed, 24 Sep 2014 21:37:18 GMT

bdunbar

That command should be run from configuration mode:

admin@PA-200> configure

admin@PA-200# delete deviceconfig system syslog-certificate

Thanks

Re: Failure to Delete a Certificate

Retired Member — Thu, 25 Sep 2014 13:44:02 GMT

I think you just missed the configure mode

Have you been able to delete it ?

Re: Failure to Delete a Certificate

bdunbar — Thu, 25 Sep 2014 16:09:58 GMT

Once I entered configure mode, deleted the syslog-certificate. Then the commit ran from GUI, and I was able to delete the 'bad' certificate.

Thanks!