new feature in the Cortex XDR agent 8.3, Agent Certificates

[sebasnova]

hi

i have cortex xdr on several endpoints, can you explain me more about the new feature Agent Certificates and its implication and how to work? i want to set enabled this function because is disabled for old tenants

[abdrahman]

Dear @sebasnova , 

Hope you are doing well and thank you for reaching out to the live community. From the above query I understand that you have a query around our new changes to the Agent Certificates. 

Please note to improve security, the Cortex XDR agent 8.3 is now ensuring the use of a provided certificate without using the local fallback store (trusted root CA file). In order to graduate the adoption of this requirement, Disabled (Notify) is default for existing tenants; new tenants will have the Enabled configuration by default.

This means that for the new tenants Palo alto networks will be providing the certificate and we will not be relying on the fallback store anymore. For tenants who has not enabled this will be notified by the banner when they login to the portal. More information can be found in the link provided below, thank you: 

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/8.3/Cortex-XDR-Agent-Release-Notes/Changes-to-...

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.

[sebasnova]

Hi,thanks, but

one cuestion more, What was the local certificate used for?