topic Re: SSL decryption Certificate expired in General Topics

SSL decryption Certificate expired

VishnuPS — Tue, 24 Aug 2021 06:02:11 GMT

Hi Team,

We have PA self signed certificate in the firewall being used for SSL Decryption, the certificate is about to expire

From GUI we can able to renew for another one year but our concern

Will it automatically replace the existing certificate in end machine
Or do we need to push the new certificate to end machines to take effect
Or no action required

Kindly suggest the best practice

Re: SSL decryption Certificate expired

S.Cantwell — Tue, 24 Aug 2021 15:34:39 GMT

Hello there

You will need to extend your cert (I always recommend 5 yrs vs 1yr, to avoid this exact issue) and you will need to push the cert to all devices, using GPO, SCCM, or similar technique.

What other questions can we answer for you?

Re: SSL decryption Certificate expired

VishnuPS — Wed, 25 Aug 2021 09:15:58 GMT

Thank you steve.

Re: SSL decryption Certificate expired

jorge_pan — Mon, 26 Feb 2024 12:48:07 GMT

I still had a doubt.

In the case of certificate renewal, for example, the current certificate used for decrupt (self-signed) expires on 03/30/2024, and I decide to renew it today, clicking on renew and placing it for another 365 days, from that moment on. Will it have any impact on the environment? Or did the desktops continue to work (without the warning appearing in the insecure website browser) until 03/30/2024, or when I renew I already have to immediately deploy the new certificate? this is my doubt.