How to configure a site to site VPN with Self signed certificate

[Jedi_D]

Hello folks, 

This might be a newbie type of question so I appreciate your patience.....

I need to create a site to site VPN using a self signed certificate. I'm happy to do the site to site VPN. But ........... I'm not sure how to use self signed certs for doing this. Does anyone have any procedure of how to do this using certificates? Are there any links that would help me get started? I've only found this for pan-os 6 but I'm using pan-os 8

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClJdCAK

Do I need to create a Self-Signed Root CA Certificate first ?? before I generate a certificate?

Any help appreciated! Thank you. 

Rgds

Dinesh

[BPry · Accepted solution]

@Jedi_D,

The process hasn't changed; following the linked KB article should work perfectly fine.

[Jedi_D]

Hi thanks, 

That's good to know.... 

I'm just confused on one of the steps.... 

Is there any more info how to do the following.... sorry for being a noddie, but I havent done this before and just wanted to get a handle of it... 

Now generate on a client certificate on both firewalls and sign each one with the imported CA certificate.