Expired Certificate in Cortex XDR documentation

[KanwarSingh01]

Hi,

Just wondering if there is any reason why we need to keep the expired certificate on system for Cortex XDR.

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/get-started-with-cortex...

The ROOT CA for Global Sign is expired:

• SHA1 Fingerprint— 75 E0 AB B6 13 85 12 27 1C 04 F8 5F DD DE 38 E4 B7 24 2E FE

Does Cortex still uses it and if there is any update on the certificate, can we please have documentation update and what is the new certificate which is to be installed on the systems?

[bbarmanroy]

Hi @KanwarSingh01 I am looking into this and will get back to you.

[bbarmanroy · Accepted solution]

Hi @KanwarSingh01 this certificate might be in use for some older agent versions. YThe newer agents do not use these. In any case, the documentation is in the process of being updated to reflect the changes. 

[bbarmanroy]

Hi @KanwarSingh01 the documentation has been updated - please see Step 3. Thank you for bringing this to our attention.

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/get-started-with-cortex...