Nominated Discussion: Web-Gui Access With No Secure Certificate

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Community Team Member
100% helpful (1/1)

This article is based on a discussion, Web-gui access with no secure certificate., posted by @SaulGlz  and answered by the Support Team. Read on to see the discussion and solution!

 

I access via GUI from Chrome and observe that the connection is not secure.

I created the certificate for the firewall, but Chrome keeps saying that my connection is not secure.

How can I solve this problem if the AC I have is internal to the company?

Is there any way to generate certificates with AES-GCM?

in chrome, the following legend appears to me.

 

image005.pngimage002.pngimage006.pngimage007.pngimage009.png

 

 

Accepted Solution

 

Hi Team,

 

I was able to solve the issue by using below KB for adding SAN name in certificate

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CluVCAS

 

Generated Self-Signed certificate in PA,then in certificate attributes add hostname and IP same as management address.

Here hostname denotes as SAN name (Subject Alternative Name)

Attach certificate to TLS Profile and that TLS profile to SSL/TLS management interface to login in GUI via TLS1.1/2

 

Attached reference screenshot

 

 

 

 

 

 

Rate this article:
  • 1555 Views
  • 0 comments
  • 0 Likes
Register or Sign-in
Labels
Article Dashboard
Version history
Last Updated:
‎08-10-2022 11:09 AM
Updated by: