For details on cookie usage on our site, read our Privacy Policy
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
Error generating a new certificate
- LIVEcommunity
- Collaboration
- Discussions
- General Topics
- Error generating a new certificate
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
Error generating a new certificate
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
11-12-2019 01:39 AM - edited 11-12-2019 01:42 AM
Hi, we are trying to generate a new elf-signed certificate in Panorama and we receive this error: Failed to insert certificate into configuration. Failed to find beginning of certificate. Make sure certificate starts with BEGIN CERTIFICATE tag.
This is the certificate and the error:
Why are we receiving this error?
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
11-12-2019 02:22 PM
What version of Panorama are you running?
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
11-12-2019 11:40 PM
version is 8.1.9-h4
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
01-21-2020 11:34 AM
Did you ever figure this out? I am seeing the same thing.
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
01-21-2020 11:41 AM
Outside of a few software bugs present in specific PAN-OS versions, this is almost always caused by an actual malformed certificate. The firewall itself is performing a pretty basic check as far as looking at the certificate, ensure that your certificate is actually formatted correctly.
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
01-21-2020 11:49 AM
Figured it out. It was Panorama permissions.
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
05-07-2020 03:02 AM
We are facing same issue. Where to check panorama permission?
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
05-07-2020 03:10 AM
what permissions are required on panorama ?
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
05-07-2020 03:21 AM
In our case, this issue was solved by itself. Customer thought maybe any change in the week caused this, but not sure.
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
07-23-2020 05:29 AM
I also have the same problem, but only on Panorama (9.0.9). I can import the same certificate on NGFW.
Did anyone open a case?
- Global Protect connection Failed could not verify the server certificate of the gateway in GlobalProtect Discussions
- FTP Inbound Decrypt Issues in General Topics
- "load config partial" to copy template data across different panoramas in Panorama Discussions
- GP on Windows 11 - client certificate issue in General Topics
- GP disconnects in a set up with two ISPs when the primary link is down and users try to connect using the secondary link in GlobalProtect Discussions
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
