topic SSL Certificates import in General Topics

SSL Certificates import

a.jones — Fri, 09 Aug 2019 08:58:45 GMT

Hi All,

I need to import some SSL certificates for a Global Protect instance. Customer has already supplied me with their wildcard certificates which I have imported but I cannot select them when creating an SSL/TLS Service Profile. Can I set up this way or should I generate the CSR from the firewall and get the certificates created for me?

Regards

Adrian

Re: SSL Certificates import

aleksandar.astardzhiev — Mon, 12 Aug 2019 09:12:50 GMT

Hi @a.jones,

When creating SSL/TLS profile, firewall will not allow you to select ceritificate that doesn't have private key imported - it wouldn't show up in the dropdown list.

So I am guessing that your customer have provide you only the public key - the certificate, but didn't send you the private key for it.

You can confirm that by checking the uploaded certificate via the GUI. Go to Device -> Ceritificate Management -> Certificates and see if the certificate have a check for key

If that is correct you have two options:

- Request again from user to send you PKCS 12 (.p12) which is combination of both private and public key

- Generate a CSR and send it to the customer to sign it.

As you mentioned that your customer is using wildcard certificate I believe that your prefferable option will be the first one. Because creating CSR will meand that customer will need to re-issue their wildcard ceritifcate.

Re: SSL Certificates import

a.jones — Tue, 20 Aug 2019 09:13:37 GMT

Thanks. As I posted this originally I was chasing the customer for a private key. It has taken two weeks to get but the solution now works. Thanks for the info.