Error generating a new certificate

[BigPalo]

Hi, we are trying to generate a new elf-signed certificate in Panorama and we receive this error: Failed to insert certificate into configuration. Failed to find beginning of certificate. Make sure certificate starts with BEGIN CERTIFICATE tag.

This is the certificate and the error:

Why are we receiving this error?

[BPry]

@BigPalo,

What version of Panorama are you running? 

[BigPalo]

version is 8.1.9-h4

[rnobrega]

Did you ever figure this out?  I am seeing the same thing.

[BPry]

@rnobrega,

Outside of a few software bugs present in specific PAN-OS versions, this is almost always caused by an actual malformed certificate. The firewall itself is performing a pretty basic check as far as looking at the certificate, ensure that your certificate is actually formatted correctly. 

[rnobrega]

Figured it out.  It was Panorama permissions.

[Deepak_K]

We are facing same issue. Where to check panorama permission?

[fatboy1607]

what permissions are required on panorama ?

[BigPalo]

In our case, this issue was solved by itself. Customer thought maybe any change in the week caused this, but not sure.

[Ilya_Kuranov]

I also have the same problem, but only on Panorama (9.0.9). I can import the same certificate on NGFW.

Did anyone open a case?

[Deepak_K]

In my case issue resolved next day automatically.

[Magnus_App]

Solved by using Firefox instead of Edge

[segap]

Solved by using Chrome instead of Firefox. 🙂

[natman-smhi]

Had issues importing certificates into Panorama running 10.2.4h4 using Firefox. Worked fine directly on the firewall on the same version. Changed browser to Chrome and it worked like a charm in Panorama.

[ChrisThornton]

I had the issue on 11.0.3 with Chrome and switched to Firefox. I was able to upload certs.