Certificate issue

[Joshan_Lakhani]

Hello Team,

I want to import certificate in firewall but facing issue.

below is the snapshot.

certificate extension is ".crt"

I have a below query regarding this:-

1 - Is paloalto support ".crt" format.
2 - is paloalto support ".cer" format.
3 - Is paloato support ".PFX" format.
4 - Is .crt and .pem format are same.

Any one can give me suggestion on this.

[DelvinC]

You can typically upload .cer and .crt certificates to the PAN firewall as .pem format. Sometimes depending on your external CA, you may need to import your intermediate root CA certificate to the firewall and import the signed certificate as a child of the intermediate root CA certificate. PAN firewalls support .cert & .crt as long as they are encoded as PEM. PAN firewalls also support .pfx format.

You can utilize openSSL to convert between one format to another. 

Reference1

Reference2

[Joshan_Lakhani]

thank you reply

As iam not facing the issue with certificate  extension. when i import the certificate  in firewall it's will continuously upload and not generation the error or any thing  and still upload please suggest.

[DelvinC]

If you happen to have the Root CA and Intermediate Root CA certificates, can you try importing the certificates as child certificates in the top to bottom fashion. Or try installing it as a chained certificate.

[Joshan_Lakhani]

iam having only one certificate CA . when i trying to import this certificate in firewall it's continuously uploading the certificate for endless time with no refusal or error\success message

[Joshan_Lakhani]

Can i import the chain certification(3rd Part) to reslove this issue because when i try to import the certificate i continue uploading and never endless. So if i try to import chain certificate like in below link so is possible to resolve my issue please advice

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkoCAC

[DelvinC]

It wouldn't hurt to try. 

[Joshan_Lakhani]

thank for reply

As i tried in my CX end but same status can you please let me know if there is another option to resolve the 3rd party import certificate  in firewall. Please advice 

[Jafar_Hussain · Accepted solution]

@Joshan_Lakhani 

Please try to import a certificate from another browser definitely it will work.

For example - try with Mozilla Firefox or IE.