topic Re: Palo Alto - The server's X.509 certificate cannot be trusted in General Topics

Palo Alto - The server's X.509 certificate cannot be trusted

preetpk — Mon, 13 Jul 2020 06:55:53 GMT

We used Nessus tool to run security scan on the PA-5020 & PA-3020 series & it identified with the following below medium vulnerability:

The server's X.509 certificate cannot be trusted.

Please let me know, for any fix to this vulnerability.

Re: Palo Alto - The server's X.509 certificate cannot be trusted

BPry — Tue, 14 Jul 2020 03:18:35 GMT

@preetpk,

The management interface on the firewalls doesn't have a trusted certificate, or Nessus does not trust the certificate being used. This could be because you simply haven't installed a certificate for the GUI to utilize which is trusted by your CA, or that Nessus doesn't trust your CA.

Re: Palo Alto - The server's X.509 certificate cannot be trusted

preetpk — Wed, 15 Jul 2020 09:23:02 GMT

Thanks for the update, please let me know if it is possible to install internal CA certificate for Palo Alto Web-GUI. In case if internal CA certificate is supported, please share the KB article.

Re: Palo Alto - The server's X.509 certificate cannot be trusted

mhassanin — Thu, 05 Sep 2024 07:20:47 GMT

https://community.tenable.com/s/article/How-To-Resolve-51192-SSL-Certificate-Cannot-Be-Trusted-quick-Fix?language=en_US