How to get PaloAlto to use Local CA certificate instead of self-signed certificate.

[shayes]

On my network, I have a Windows Server CA, a Windows 10 box, and I PaloAlto box.  The PA is currently running Software version 10.1.7.  I have created a PA.csr and sent it to my CA server, and received my PA.cer w/o a private key.  I have uploaded the PA.cer and the CARoot.cer to my PA box.  It seems like no matter what I do, or configure, I cannot get the PA Box to use the CA cert I have uploaded, it uses the self-signed PA cert every time.  Any chance someone can share a walkthrough for me, or share with me a step that I am missing to get the PA box to use my CA cert?

Thanks.

[rmfalconer]

Besides importing it, did you bind that certificate anywhere? What are you trying to use it for?

[Claw4609]

Like the cert for the management GUI? Are you creating a ssl/tls service profile with the cert and then attaching that profile under Device>Setup>Management?