Error generating a new certificate

[BigPalo]

Hi, we are trying to generate a new elf-signed certificate in Panorama and we receive this error: Failed to insert certificate into configuration. Failed to find beginning of certificate. Make sure certificate starts with BEGIN CERTIFICATE tag.

This is the certificate and the error:

Why are we receiving this error?

[LanceBereck]

Just had the same here using Chrome & POS version 11.0.3.  I generated one cert on one FW with no issue via Panorama.  When I attempted the second FW I got  "Failed to insert CSR into configuration. Internal error. Failed to insert xml node."

While I was mucking about trying things I also got "Failed to insert certificate into configuration. Only self signed CA certificates can have identical subject and issuer fields."

Ctrl+F5 didn't help so I just logged out of Panorama and back in and it went through fine with the exact same settings.

Something cached in the login I guess. Perhaps hanging onto something related to the first cert?

[Mariano7717]

I believe found the root cause, in a way that also explains the "fixes" from everyone else.

The issue is caused by a timeout of the admin session onto the management GUI, have you ever been working through the firewalls onto the local ones or via Panorama, went to do something else, back onto the GUI and after a while things seem to not work fine, reload the page on the browser and automatically prompted with the login page to the management?

Same here, reload the page, login again, try import the same cert again, issue gone.

Explains how other people went to try on another browser and it worked straight away (because they would have to log in fresh to the mgmt)

Cheers!