Global Protect Certificate Request

[meijones]

Hi,

I am looking for a way to generate a certificate request from a PAN running 4.1.5 which I can then use against our internal Microsoft CA to create a server certificate to use in GlobalProtect.

Any help would be great,

Thanks

Mei

[rmonvon]

Hi Mei...You will need to generate the certificate signing request (CSR) from an external source like from your Microsoft CA.  We do not support CSR in 4.1.x at this time.  CSR is a feature to be added in our next PAN-OS release, which is scheduled for later this year.  Thanks.

[npare]

You can use OpenSSL to take the certificate exported from the firewall and create a CSR from it.