create a certificate user-id agent

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

create a certificate user-id agent

L1 Bithead

I'm having trouble generating a certificate to install on the user-id agent, to no avail.

Someone can give me the correct steps.

Please a need help to steps...

 

 

Capture.PNG

 

 

1 accepted solution

Accepted Solutions

Hello JayGolf,

 

I am having trouble creating the certificate on the firewall correctly, as I have seen in a few documentations it is not very helpful, not very didactic, and exporting, exporting as PEM.

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cla8CAC

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFoCAK

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGFCA0&lang=en_US

 

This last link brings the information, but as we see in all documents not the steps to create the certificate, I have tried several forms for and creating but according to this document I have no success.

 

I have searched in several places here on the forum and in the KB's I have had no success, can someone point me to a document that has the steps correctly.

 

Thanks!

 

Rubens Zolotujin

 

View solution in original post

5 REPLIES 5

Community Team Member

Hi @RubensZolotujin ,

 

What is the file format of the certificate you used for the User-ID? The cert will need to include the private key as well. A PEM and PKCS12 should work well. 

LIVEcommunity team member
Stay Secure,
Jay
Don't forget to Like items if a post is helpful to you!

Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

Hello JayGolf,

 

I am having trouble creating the certificate on the firewall correctly, as I have seen in a few documentations it is not very helpful, not very didactic, and exporting, exporting as PEM.

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cla8CAC

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFoCAK

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGFCA0&lang=en_US

 

This last link brings the information, but as we see in all documents not the steps to create the certificate, I have tried several forms for and creating but according to this document I have no success.

 

I have searched in several places here on the forum and in the KB's I have had no success, can someone point me to a document that has the steps correctly.

 

Thanks!

 

Rubens Zolotujin

 

L3 Networker

Hi,

I also have same error.When i try to generate certificate on shared vsys. Its showing only on vsys 4 not shared. I have created with superuser account. Any solution to create certificate for shared vsys.

L3 Networker

Hi @RubensZolotujin Are you trying to install the RootCA certificate?

Do you have vsys in your firewall?

yes you must install the root certificate of your active directory, root > below the certificate generated in AD will be attached

  • 1 accepted solution
  • 1932 Views
  • 5 replies
  • 1 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!