Certificate for gateway

fatboy1607 — Mon, 07 Oct 2019 08:05:04 GMT

My CA is Portal / Gateway firewall it is having different template group and LSVPN HUB firewall on different template group.

I have created new certificate for HUB gateway on Portal/GW template , exported it from template group and imported it on HUB firewall template group it is giving below error

upload--private key - passphrase invalid input , upload -> private key -> passphrase is invalid

Any suggestions why we are getting this error.

Re: Certificate for gateway

S.Cantwell — Wed, 09 Oct 2019 02:16:40 GMT

Hello

It sounds like there may be a few missed steps in getting the certificate exported/imported between the 2 templates.

Check out this link:

https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/large-scale-vpn-lsvpn/enable-ssl-between-globalprotect-lsvpn-components/deploy-server-certificates-to-the-globalprotect-lsvpn-components.html

and specifically look at Step 3, and then sub-step 2 and 3.. it talks about exporting using PKCS12 with a passphrase to protect the private key. I think this area is where things are not properly implemented.

Review the link and then let us know.

Thanks

topic Certificate for gateway in General Topics

Certificate for gateway

Re: Certificate for gateway