Certificates not showing under Devices Certificates or CLI

[JuanMAbellan]

I am facing an issue where if I import a certificate it doesn´t appears in the Devices certificates trough GUI or listed in CLI but it appears to be used in the SSL/TLS  Services profiles or in the XML. Anyone know why this happens?

Regards

[TomYoung]

Hi @JuanMAbellan ,

I saw this issue with one customer.  That one was a duplicate of an existing certificate.  I am not sure if that is why if would not show in GUI or CLI.  The fix was to export the XML configuration, and find/delete the certificate and any references.  Then import/load/commit the XML configuration.

When we re-imported the certificate after those steps, it worked fine.

Thanks,

Tom

[JuanMAbellan]

Hello Tom, thanks for your answer. In this firewall there is no multiple vsys. The certificate should all be store at shared, right? It seems that some are stored in shared and other in vsys1.¿could this be possible?

Regards

[TomYoung]

Hi @JuanMAbellan ,

That could definitely be the issue.  If you go through my process, you will see exactly in the XML tree the certificates are.  The process seems daunting, but doesn't take that long.

Thanks,

Tom

[JuanMAbellan]

Hello @TomYoung ,

thanks for your support.

I would like to know if there is any official response to why some certificates go to shared and others to vsys? In this case there is no multiple vsys so we can´t select the option to store the certificate in shared.

Regards