Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
11-23-2020 07:15 AM - edited 11-23-2020 07:16 AM
Hello,
On Device>Certificate Management>Certificates - I have a IntermediateCert, under the RootCert, that is expiring. I can easily renew it, (It's self signed), but I'm trying to understand what its being used for. I haven't found any information that easily explains it, (just basically how to install, renew, etc).
How can I find out what this certificate is for, whats using it and what its purpose is? Also what would the benefit be of not having it self signed?
Thanks.
11-24-2020 08:45 PM
If you use the search feature in the GUI you can enter the certificate name and find any place that its referenced in the configuration. The reason that you wouldn't want to use a self-signed has everything to do with where you are using the certificate. So if you're using it for something public facing like GlobalProtect for BYOD you would want to be using a trusted certificate, but internal things like SSL Decryption you would generally just use a self-signed or something signed by your internal PKI system.
11-24-2020 08:45 PM
If you use the search feature in the GUI you can enter the certificate name and find any place that its referenced in the configuration. The reason that you wouldn't want to use a self-signed has everything to do with where you are using the certificate. So if you're using it for something public facing like GlobalProtect for BYOD you would want to be using a trusted certificate, but internal things like SSL Decryption you would generally just use a self-signed or something signed by your internal PKI system.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
