topic Re: Certificate-based Authentication for the WebUI in General Topics

Certificate-based Authentication for the WebUI

ENAGAS — Tue, 11 Feb 2014 10:13:40 GMT

Hi,

I read about "Certificate-based Authentication for the WebUI" article. I am not sure if we can use it in our enviroment:

- We have our enterprise CA and each admin has a CA Certificate. We are using those certificates for other purposes like admin authentication in security devices, Wifi and so on.

- We want use those certificates for admin authentication in paloalto devices.

Can we accomplish it in paloalto devices or we can only use certificates generated by PaloAlto device?

Thank you!

Re: Certificate-based Authentication for the WebUI

pulukas — Wed, 12 Feb 2014 02:25:15 GMT

I have not set this up, but looking at the process you linked this is what I believe you need to do.

Get your Enterprise CA certificates.

In step two upload those certificates when you create the profile.

2 Create the Client Certificate Profile.

-Go to the Device tab -> Client Certificate Profile ->

Now use the remainder of the instructions in steps 3 & 4 to user the certificate setup.

but skip the creation and exporting of PA generated user certificates. The user certificates you have from the Enterprise CA are the equivalent of these steps.