create a certificate user-id agent

[RubensZolotujin]

I'm having trouble generating a certificate to install on the user-id agent, to no avail.

Someone can give me the correct steps.

Please a need help to steps...

[JayGolf]

Hi @RubensZolotujin ,

What is the file format of the certificate you used for the User-ID? The cert will need to include the private key as well. A PEM and PKCS12 should work well. 

[RubensZolotujin · Accepted solution]

Hello JayGolf,

I am having trouble creating the certificate on the firewall correctly, as I have seen in a few documentations it is not very helpful, not very didactic, and exporting, exporting as PEM.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cla8CAC

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFoCAK

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGFCA0&lang=en_US

This last link brings the information, but as we see in all documents not the steps to create the certificate, I have tried several forms for and creating but according to this document I have no success.

I have searched in several places here on the forum and in the KB's I have had no success, can someone point me to a document that has the steps correctly.

Thanks!

Rubens Zolotujin

[KhaleelE]

Hi,

I also have same error.When i try to generate certificate on shared vsys. Its showing only on vsys 4 not shared. I have created with superuser account. Any solution to create certificate for shared vsys.

[KhaleelE]

Hi @RubensZolotujin Are you trying to install the RootCA certificate?

Do you have vsys in your firewall?

[RubensZolotujin]

yes you must install the root certificate of your active directory, root > below the certificate generated in AD will be attached