topic Re: PA cluster certificate missing in General Topics

PA cluster certificate missing

soporteseguridad — Wed, 03 Jan 2018 15:46:30 GMT

Hi,

We have two devices in HA, we realized that active node has a certificate (captive portal) but the passive not. The configs are synchronized but the passive doesnt have this certificate. We tried to export this certificate from node active and import in node passive, the proccess is done properly but the certificate is not showed. Why the passive unit is not taking this certificate??? any idea. PanOS is 7.1.6

Re: PA cluster certificate missing

soporteseguridad — Thu, 04 Jan 2018 08:22:23 GMT

any idea??

Re: PA cluster certificate missing

kiwi — Thu, 04 Jan 2018 09:46:17 GMT

Hi @soporteseguridad,

Make sure that time is correct on second unit.

Check the logs for errors when importing the certificate ... I'd start with checking the sslmgr, devsrv and ms logs.

Cheers,

-Kiwi.