Certificate-based Authentication for the WebUI

[ENAGAS]

Hi,

I read about "Certificate-based Authentication for the WebUI" article. I am not sure if we can use it in our enviroment:

- We have our enterprise CA and each admin has a CA Certificate. We are using those certificates for other purposes like admin authentication in security devices, Wifi and so on.

- We want use those certificates for admin authentication in paloalto devices.

Can we accomplish it in paloalto devices or we can only  use certificates  generated by PaloAlto device?

Thank you!

[pulukas · Accepted solution]

I have not set this up, but looking at the process you linked  this is what I believe you need to do.

Get your Enterprise CA certificates.

In step two upload those certificates when you create the profile.

2 Create the Client Certificate Profile.

-Go to the Device tab -> Client Certificate Profile ->

Now use the remainder of the instructions in steps 3 & 4 to user the certificate setup.

but skip the creation and exporting of PA generated user certificates.  The user certificates you have from the Enterprise CA are the equivalent of these steps.