topic Global Protect Certificate Request in General Topics

Global Protect Certificate Request

meijones — Thu, 31 May 2012 08:54:51 GMT

Hi,

I am looking for a way to generate a certificate request from a PAN running 4.1.5 which I can then use against our internal Microsoft CA to create a server certificate to use in GlobalProtect.

Any help would be great,

Thanks

Mei

Re: Global Protect Certificate Request

rmonvon — Mon, 04 Jun 2012 21:30:47 GMT

Hi Mei...You will need to generate the certificate signing request (CSR) from an external source like from your Microsoft CA. We do not support CSR in 4.1.x at this time. CSR is a feature to be added in our next PAN-OS release, which is scheduled for later this year. Thanks.

Re: Global Protect Certificate Request

npare — Mon, 04 Jun 2012 21:42:45 GMT

You can use OpenSSL to take the certificate exported from the firewall and create a CSR from it.