topic Re: Replacement of PA Management Certificate in General Topics

Replacement of PA Management Certificate

joehansen — Thu, 28 Mar 2013 23:03:04 GMT

I asked this in a recent class (201/205) but the instructor wasn't sure of the answer so here goes: Can the management certificate be replaced? We use a private CA for internal sites, as well as public certs for some devices.

Thanks.

Re: Replacement of PA Management Certificate

jvalentine — Thu, 28 Mar 2013 23:26:34 GMT

In the GUI, go to Device / Certificates / Import, and import the Certificate you'd like to use for the management interface. Once it has been imported, click on that Certificate and enable "Certificate for Secure Web GUI". Commit the changes and re-connect to the management GUI.

Re: Replacement of PA Management Certificate

scantwell — Fri, 29 Mar 2013 19:12:39 GMT

Absolutely they can be replaced. I have done this on my PA-200 FW and on a few of the PA-500s that are in my training rack.