Failed to determine issuer

[Jack_Howells]

Hi guys,

I have a certificate that I need renewing as it's expired, but I am seeing "failed to determine issuer" when attempting to do this.

The certificate is a self-signed certificate, but it wasn't generated on the Palo, but rather an external CA. Do I need to remove this certifiate and renew it on the server I generated it from, or should I be able to renew it on the Palo? I believe that the CA must revoke the certificate, but this means they have to renew it as well, or can you renew it on the Palo using OCSP?

Cheers

Jack

[pankaku]

Try importing the Root ca public cert on firewall and then try. If that fails then you have to renew it on server and then import it on firewall.

[Jack_Howells]

Hi Pankaj,

That is what was done intially to get the error message.