topic Re: SSL Decryption - Forward Trust Certificate option not available in General Topics

SSL Decryption - Forward Trust Certificate option not available

CARRIERJerome — Tue, 05 Mar 2019 08:50:01 GMT

Hello

I try to configure the ssl decryption on my cluster of PA-220. I have an internal PKI based on Microsoft solution. On the first node, I'm able to generate the request, the csr has been validated by the PKI server and I'm able to export from the PKI the certificate (base-64 encoded). I'm able to import the certificat in my PA-220 device without error but when I try to enable "Forward Trust Certificate" and "Forward Untrust Certificate" options, I can't select these options.

Why these options are not available ?

Re: SSL Decryption - Forward Trust Certificate option not available

Mick_Ball — Tue, 05 Mar 2019 15:13:37 GMT

is it a trusted root CA?

Re: SSL Decryption - Forward Trust Certificate option not available

CARRIERJerome — Tue, 05 Mar 2019 15:28:30 GMT

Hello

First, I imported on the device the root-ca certificate. After, I generated a new certificat and specify External Authority in the option Signed By.

After, I exported the CSR and I validate the CSR on my PKI server. I exported the certificate from my PKI server as a based-64 format and import the certificate in the device (without error). But I can't select the option "Forward Trust Certificate" on the certificate information.

Re: SSL Decryption - Forward Trust Certificate option not available

NijithPN — Wed, 07 Apr 2021 13:23:27 GMT

I am also facing this problem. Iam not able to seethe forward trust option( grayed out). Any document is available for this.