Certificate-Based Administrator Authentication to the Web not work on Passive node cluster

[Alpalo]

Hello team,

I am configuring a new deployment, "

Configure Certificate-Based Administrator Authentication to the Web Interface"

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/firewall-administration/manage-firewall-a...

ITs working fine for Node 1 but Node 2 is not working, both FW are on cluster ... any help for its works fine also on Node2?

Regards

[BPry]

@Alpalo,

Because a cluster and HA peers are different things, can you confirm if we're talking about an actual HA Cluster or if we're simply talking about two HA members (Active/Passive or Active/Active config)? Additionally are you using the same CA certificate across both nodes when you generated the user certificates? 

[Alpalo]

Hello,

HA cluster Active // pasive ( 2 Hardware FW ), I tested with the same CA certificate across both nodes when I generated the user certificates and with a different certificate but the problems always is present..

thanks os much for your help,

Thanks

Regards

[Alpalo]

Hello team, 

Can anybody helps me? Any idea?

Regards