accessing Panorma GUI in eve-ng lab environment, certificate issues with chrome

[hfakoor2]

So i've set up some firewall images in eve-ng 10.0.4,

I dhcp'd the management interfaces, connectivity is fine everything working as expected, 

except I can't access the GUI on my local host chrome browser

Giving me the error:

NET::ERR_CERT_COMMON_NAME_INVALID

so I can't access the GUI, and I read on some other post about changing the alternative name as potentially solving the issue:  https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CluVCAS

among other Live forum discussions.

And so i can't do that in the GUI, so i figured I would try CLI,

I tried adding a random name with the ip as the FQDN, as one of the LIVE posts this may fix the issue just to give it a try and I get the failed to insert error.

Can someone guide me on how to fix my problem?

[hfakoor2]

Oh yeah and this,

So I'm thinking I need to actually set up some type of cert first which is the real issue at hand. How to do that via CLI?

[hfakoor2]

And I'm getting syntax errors when trying to generate a cert...

[hfakoor2]

So so i managed to set up the cert on the PA device with this CLI command:

equest certificate generate ca yes digest sha256 algorithm RSA rsa-nbits 2048 certificate-name PA9 name 192.168.56.136

however when trying to get to the GUI via web browser  I get this error:

NET::ERR_CERT_COMMON_NAME_INVALID

so if anyone could guide me on this it would be awesome

[hfakoor2]

I got it working just by typing http  instead of https

XD

I'm going to be posting some heavy scripting soon, and maybe rolling it up into a bigger program to post on my github, so if you're interested would like to follow along and to help me you can check out my upcoming posts and follow my github 🙂

[TomYoung]

Hi @hfakoor2 ,

Did you use an SSL/TLS Service Profile to attach the certificate to the web UI (Panorama > Setup > Management > General Settings > SSL/TLS Service Profile)?

Thanks,

Tom