Extended validation certificates, Global Protect

[kaare_tragethon]

Hi all,

I'm trying to use Extended Validation certificates on my Global Protect so that users connecting to the web-portal will see our EV certificate. I've successfully imported my certificates and assigned them as the server certificates in both the Global Protect Gateway and the Portal. When I connect to the portal I get "no green bar"... I've run a utility from our certificate provider and the response from the utility is: "The server is not sending the required intermediate certificate".

Anyone know what could cause this problem? Maybe I'm missing some configuration?ifi

[mikand · Accepted solution]

Could it be the issue which sdarapuneni hints of in page 32 at https://live.paloaltonetworks.com/thread/5732 ?

Meaning you should include the intermediate cert (along with root) in the same file (cert) you import to the PA device.

[kaare_tragethon]

mikand wrote:

Could it be the issue which sdarapuneni hints of in page 32 at https://live.paloaltonetworks.com/thread/5732 ?

Meaning you should include the intermediate cert (along with root) in the same file (cert) you import to the PA device.

Merging the certificates in the same file solved the problem! Thank you so much!!