PANOS6.0.5 Inbuilt CA can't generate a certificate with UPN (user principal name) attribute?

CMG — Thu, 27 Aug 2015 11:03:24 GMT

PANOS 6.05 inbuilt PAN certificate authority doesnt seem to have the ability to generate a certificate with subjectalternate value for UPN (user principal name e.g user@domain.local ).

This is the standard way that Microsoft embeds usernames (UPN format) into certificates,

On PAN CA generated certificates you could set the username/samaccountname in the subject field.. but then you end up with two different user certificate formattings, which would require separate certificate profiles if matching LDAP username to Certificate username..

Wheras microsoft's standard user certificate templates only allow the use of "common name" and "fully distinguished name" in the subject field when automatically building certificates from AD attributes..

Has this been remediated in newer releases? Can the PAN inbuilt CA now generate certificates with SAN UPN field? or is there a cleaner workaround then having to have separate certificate profiles for PAN generated user certificates vs Microsoft CA generated user certificates?

Re: PANOS6.0.5 Inbuilt CA can't generate a certificate with UPN (user principal name) attribute?

Lucky — Thu, 27 Aug 2015 20:59:31 GMT

Hi, CMG,

I am running 7.0 and I just checked - not available yet. Your best bet is to submit a feature request through a SE, I think.

Regards

Luciano

topic Re: PANOS6.0.5 Inbuilt CA can't generate a certificate with UPN (user principal name) attribute? in General Topics

PANOS6.0.5 Inbuilt CA can't generate a certificate with UPN (user principal name) attribute?

Re: PANOS6.0.5 Inbuilt CA can't generate a certificate with UPN (user principal name) attribute?