topic Re: Certificate issue in General Topics

Certificate issue

Joshan_Lakhani — Wed, 24 Jun 2020 14:43:13 GMT

Hello Team,

I want to import certificate in firewall but facing issue.

below is the snapshot.

certificate extension is ".crt"

I have a below query regarding this:-

1 - Is paloalto support ".crt" format.
2 - is paloalto support ".cer" format.
3 - Is paloato support ".PFX" format.
4 - Is .crt and .pem format are same.

Any one can give me suggestion on this.

Re: Certificate issue

DelvinC — Wed, 24 Jun 2020 16:12:27 GMT

You can typically upload .cer and .crt certificates to the PAN firewall as .pem format. Sometimes depending on your external CA, you may need to import your intermediate root CA certificate to the firewall and import the signed certificate as a child of the intermediate root CA certificate. PAN firewalls support .cert & .crt as long as they are encoded as PEM. PAN firewalls also support .pfx format.

You can utilize openSSL to convert between one format to another.

Reference1

Reference2

Re: Certificate issue

Joshan_Lakhani — Wed, 24 Jun 2020 19:22:44 GMT

thank you reply

As iam not facing the issue with certificate extension. when i import the certificate in firewall it's will continuously upload and not generation the error or any thing and still upload please suggest.

Re: Certificate issue

DelvinC — Wed, 24 Jun 2020 20:14:49 GMT

If you happen to have the Root CA and Intermediate Root CA certificates, can you try importing the certificates as child certificates in the top to bottom fashion. Or try installing it as a chained certificate.

Re: Certificate issue

Joshan_Lakhani — Wed, 24 Jun 2020 20:19:54 GMT

iam having only one certificate CA . when i trying to import this certificate in firewall it's continuously uploading the certificate for endless time with no refusal or error\success message

Re: Certificate issue

Joshan_Lakhani — Fri, 26 Jun 2020 19:25:38 GMT

Can i import the chain certification(3rd Part) to reslove this issue because when i try to import the certificate i continue uploading and never endless. So if i try to import chain certificate like in below link so is possible to resolve my issue please advice

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkoCAC

Re: Certificate issue

DelvinC — Fri, 26 Jun 2020 20:04:18 GMT

It wouldn't hurt to try.

Re: Certificate issue

Joshan_Lakhani — Sat, 27 Jun 2020 20:23:54 GMT

thank for reply

As i tried in my CX end but same status can you please let me know if there is another option to resolve the 3rd party import certificate in firewall. Please advice

Re: Certificate issue

Jafar_Hussain — Mon, 29 Jun 2020 18:11:40 GMT

@Joshan_Lakhani

Please try to import a certificate from another browser definitely it will work.

For example - try with Mozilla Firefox or IE.