topic Re: IPSec VPN certificates in General Topics

IPSec VPN certificates

ldapjazz — Mon, 14 Jun 2021 00:20:30 GMT

I’m very new to Palo Alto and testing things out on a home virtual lab on local computer. I’m trying to configure IPSec vpn between 2 sites using certificates. My problem is that when I export the certificate from PA-1, I cannot import it to PA-2 because I don’t know where FW-1 has saved it on the windows 10 pc being used to manage the firewalls.

Is it possible to manually copy the certificate from PA-1 and save it to the windows 10 desktop where I can then upload it to PA-2? Can anyone help?

Re: IPSec VPN certificates

nikoolayy1 — Mon, 14 Jun 2021 12:01:09 GMT

You may try and play using SCP for ssh file transfer (it is used for congfig but you can try using it for ssh):

https://live.paloaltonetworks.com/t5/general-topics/unable-to-export-certificates/td-p/322136

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-cli-quick-start/use-the-cli/use-secure-copy-to-import-and-export-files

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-cli-quick-start/use-the-cli/use-secure-copy-to-import-and-export-files/export-a-saved-configuration-from-one-firewall-and-import-it-into-another.html

Re: IPSec VPN certificates

ldapjazz — Tue, 15 Jun 2021 03:00:05 GMT

Thanks Nikolay. The first link yielded a solution for me. I used Internet Explorer. Microsoft Edge also worked but not firefox or chrome.