Failed to determine issuer

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L3 Networker

Failed to determine issuer

Hi guys,

 

I have a certificate that I need renewing as it's expired, but I am seeing "failed to determine issuer" when attempting to do this.

 

The certificate is a self-signed certificate, but it wasn't generated on the Palo, but rather an external CA. Do I need to remove this certifiate and renew it on the server I generated it from, or should I be able to renew it on the Palo? I believe that the CA must revoke the certificate, but this means they have to renew it as well, or can you renew it on the Palo using OCSP?


Cheers

Jack

Highlighted
L5 Sessionator

Try importing the Root ca public cert on firewall and then try. If that fails then you have to renew it on server and then import it on firewall.

Highlighted
L3 Networker

Hi Pankaj,

 

That is what was done intially to get the error message.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!