Error generating a new certificate

[jesuscano]

Hi, we are trying to generate a new elf-signed certificate in Panorama and we receive this error: Failed to insert certificate into configuration. Failed to find beginning of certificate. Make sure certificate starts with BEGIN CERTIFICATE tag.

This is the certificate and the error:

Why are we receiving this error?

[BPry]

@jesuscano,

What version of Panorama are you running? 

[jesuscano]

version is 8.1.9-h4

[rnobrega]

Did you ever figure this out?  I am seeing the same thing.

[BPry]

@rnobrega,

Outside of a few software bugs present in specific PAN-OS versions, this is almost always caused by an actual malformed certificate. The firewall itself is performing a pretty basic check as far as looking at the certificate, ensure that your certificate is actually formatted correctly. 

[rnobrega]

Figured it out.  It was Panorama permissions.

[Deepak_K]

We are facing same issue. Where to check panorama permission?

[MandarKulkarni]

what permissions are required on panorama ?

[jesuscano]

In our case, this issue was solved by itself. Customer thought maybe any change in the week caused this, but not sure.

[Ilya_Kuranov]

I also have the same problem, but only on Panorama (9.0.9). I can import the same certificate on NGFW.

Did anyone open a case?