topic Re: Forward Trust and Untrust Certificate are grayed out once the certificate has been added. in General Topics

Forward Trust and Untrust Certificate are grayed out once the certificate has been added.

Transporter — Wed, 18 May 2016 09:23:10 GMT

Hi,

When trying to setup SSL decryption which requires enabling both “Forward Trust and Untrust Certificate”. The certificate has been added but the options are grayed out as shown.

what can be reasons?

Any idea would be appreciated. : )

Re: Forward Trust and Untrust Certificate are grayed out once the certificate has been added.

bmorris1 — Wed, 18 May 2016 10:06:29 GMT

Hello,

Have you also imported the key for this certificate? You will need this for the firewall to proxy the connection correctly.

Ben

Re: Forward Trust and Untrust Certificate are grayed out once the certificate has been added.

Transporter — Wed, 18 May 2016 11:14:51 GMT

Hi,

Thank you for your reply. Do you know how can i imported the key and which format of the certificate is better to use.

Sorry completely new in this.

Thanks

Re: Forward Trust and Untrust Certificate are grayed out once the certificate has been added.

Transporter — Wed, 18 May 2016 11:22:14 GMT

Re: Forward Trust and Untrust Certificate are grayed out once the certificate has been added.

bmorris1 — Wed, 18 May 2016 13:29:45 GMT

Hi,

If you can export your certificate with the private key as a PKCS#12 file then you can import this into the firewall.

https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os/certificate-management/import-a-certificate-and-private-key#12183

The firewall also supports import of a PEM file certificate. If your key file is seperate you can import this at the same time as the PEM file.

hope this helps,

Ben