topic Certificate Expiration Check- What it actually does in General Topics

Certificate Expiration Check- What it actually does

AndyOReilly — Thu, 17 Jun 2021 13:22:35 GMT

Certificate Expiration Check- What it actually does

The article - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POWJCA4&lang=en_US%E2%80%A9

I assumed 'on-box certificates' meant that it would alert on certificates that are installed on the box when they're close to expiry, you know, because it says 'on-box certificates'.

Palo Support have just confirmed it actually means "just the Management Interface certificate specified under Device > Setup > Device Certificate"

I've told them to update the article with better wording but who knows if they'll ever do that.

I couldn't find anything on this so posting it here for everyone else, hope it helps someone.

Re: Certificate Expiration Check- What it actually does

Remo — Fri, 18 Jun 2021 23:17:30 GMT

@jdelio / @kiwi

Maybe you could forward this again, that this knowledgebase article mentionned by @AndyOReilly needs a little clarification?

Re: Certificate Expiration Check- What it actually does

DLONGPRÉ — Tue, 07 Feb 2023 12:34:42 GMT

So, I understand there is no logging/alerting on certificates managed thru Device/Certificate Management/Certificates?

Re: Certificate Expiration Check- What it actually does

AndyOReilly — Tue, 07 Feb 2023 13:50:15 GMT

As far as I know they haven't introduced that feature yet.

You do get a warning when validating/committing config when the cert has expired, not sure if it does it before it expires.

Certificate XXXXXXXXl in shared expired on Jun 4 07:45:14 2022 GMT