Device Certificate not showing

[dwi.nur]

Hello Guys,

I have problem with device certificate, i have create the device certificate, but is not showing in GUI Palo Alto.

but when i try to import configuration the certificate is showing.

anyone can help me why device certificate is not showing in GUI ?

[Remo]

Hi @dwi.nur 

After creation, did you see the message that the cert was created successfully? (Successfully generated certificate and key pair...)

Did you maybe create the certificate in a specific vsys and it is not showing in another vsys? What PAN-OS version do you have installed?

[dwi.nur]

hi @Remo 

yes, the message show  was created successfully.

no, i just have 1 vsys right now, and i'm in PAN-OS 10.05

thank you in advance for responding to my post.

[Remo]

After generating the certificate, did you check on CLI if the cert is there? When you say it works when you import a configuration, do you import there a full device configuration - with a certificate - or only a partial configuration?

[dwi.nur]

how to check via cli ?
i import from device state configuration.

[Remo]

Connect with SSH and type the following commands:

configure

show shared certificate

Whis will show the currently configured certificates.

[VILHUEJO]

Hello Guys,

Same problem with some certificates (inbound decryption) in v8&v9;  

'show shared certificate' shows the certificate, I can select it on the decryption policy but no certificate in the list.

I'm talking with support about it.

Regards

[ulrichmedical]

Hi Guys,

same Problem here. We are using PAN-OS 10.1. When i search it in the global search they show me the vsys1. So i know it is succesfully created, but i cant use it for the Certificate Profile.

Has anyone already a solution?

Regards

[gmurugan]

What is your device model?

[VILHUEJO]

Hi

Are PA-5250.

Regards

[gmurugan]

the command would be > show device-certificate status to check device certificate

[Fisher85M]

Running 10.1.8 - Call me crazy but what seems to be working for me is if I populate the "Certificate Name" field prior to uploading the certificate. When done in this sequence the certificates display in the UI.

[tshooter]

IT may be that the certificate created doesnt have a key in it.  Is the KEY section showing a checkmark? That could be your problem.  

[KhaleelE]

Hi @Remo 

When i try to generate certificate on shared vsys. Its showing only on vsys 4 not shared. I have created with superuser account. Any solution to create certificate for shared vsys

[JohannesG]

That did the trick, thanks!