Certificate Expiration Check- What it actually does

[AndyOReilly]

Certificate Expiration Check- What it actually does

The article - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POWJCA4&lang=en_US%E2%80%A...

I assumed 'on-box certificates' meant that it would alert on certificates that are installed on the box when they're close to expiry, you know, because it says 'on-box certificates'.

Palo Support have just confirmed it actually means "just the Management Interface certificate specified under Device > Setup > Device Certificate"

I've told them to update the article with better wording but who knows if they'll ever do that.

I couldn't find anything on this so posting it here for everyone else, hope it helps someone.

[Remo]

@jdelio / @kiwi 

Maybe you could forward this again, that this knowledgebase article mentionned by @AndyOReilly needs a little clarification?

[DLONGPRÉ]

So, I understand there is no logging/alerting on certificates managed thru Device/Certificate Management/Certificates?

[AndyOReilly]

As far as I know they haven't introduced that feature yet.

You do get a warning when validating/committing config when the cert has expired, not sure if it does it before it expires.

• Certificate XXXXXXXXl in shared expired on Jun 4 07:45:14 2022 GMT