topic Re: PA traps certificate expired in General Topics

PA traps certificate expired

soporteseguridad — Mon, 26 Feb 2018 14:42:22 GMT

Hi,

We have ESM Console and server using SSL certificate. This certificate has expired so we lost communication between traps and agents, and we only connect to ESM from the own server.

How can i renew the certificate SSL???? Its mandatory to install executable installation traps again?

thanks

Re: PA traps certificate expired

OtakarKlier — Mon, 26 Feb 2018 14:43:25 GMT

Hello,

While I'm not a traps expert, you might want to contact Support on this as it sounds like its time sensitive.

Regards,

Re: PA traps certificate expired

soporteseguridad — Mon, 26 Feb 2018 14:47:03 GMT

Reviewing the PA traps documentation i see that this SSL certificate is selected when you install the .exe server or console. So the only way to change the certificate is reinstall server and console executables?

Re: PA traps certificate expired

jvalentine — Mon, 26 Feb 2018 16:44:20 GMT

Yes, this is the process I took when my SSL certificate expired. It was quick and painless.

Re: PA traps certificate expired

soporteseguridad — Mon, 26 Feb 2018 16:45:43 GMT

😞 The config is saved right. so if we reinstall we wont lose trpas config in server and core, right?

Re: PA traps certificate expired

jvalentine — Mon, 26 Feb 2018 17:11:00 GMT

That was the case when I renewed my certificate. The config is stored in a database that exists independently of the ESM/Core functions. Take a backup/snapshot of your ESM before starting, just in case you have any issues. it wouldn't hurt to contact TAC either and validate the procedure.

Re: PA traps certificate expired

soporteseguridad — Tue, 27 Feb 2018 14:26:46 GMT

Hi,

We solve the problem renewwing the certificate via CMD and ISS. It wasnt neccesary to reinstall.

Re: PA traps certificate expired

GabrielBryson — Tue, 03 Jul 2018 07:01:09 GMT

HI, sorry you mentioned you solved this by "We solve the problem renewing the certificate via CMD and ISS. It wasnt neccesary to reinstall." Could you please explain a little more what you meant, did you mean to say using CMD line and IIS???

Thanks