SSL Certificate renewal query

FarzanaMustafa — Thu, 12 Nov 2020 04:12:23 GMT

We got certificate tree like this:

the public certificate (Trusted root CA) from Digicert, Intermediate cert (Digi root) and then the SSL/TLS cert (DigiVPN). This DigiVPN is going to expire soon and we use it for GP portal and GW. The server cert is by itself and got a tick next to CA column. It is valid till 2023 and used as cert profile in GP.

Just want to know if DigiVPN certificate has to be installed on each client/end machines or only required to be updated/renewed on Panorama.

Thanks in advance.

Re: SSL Certificate renewal query

OtakarKlier — Thu, 12 Nov 2020 22:52:39 GMT

Hello,

The certificate just needs to be trusted by the client machine. So as long as the client has a way to validate it, in this case reaching out to DIgiCert, you should be OK. Meaning you dont have to install it on every client. When it expires, just renew it and install it on the PAN and change the config on the PAN to use the new cert.

Hope that helps.

topic SSL Certificate renewal query in General Topics

SSL Certificate renewal query

Re: SSL Certificate renewal query