Individual certificate for per GP VPN users

[ChandrashekharD]

Hello Team,

We have a customer, his requirement is that he want to configure individual certificate for per global protect VPN user.

Please let us know is it possible to configure or not.

Regards,

Chandrashekhar

[Claw4609]

Hello,

Wanting to hand out individual client certs? If so, yes you can do that via GlobalProtect via SCEP. Please see linked document blow. Let me know if that helps.

Deploy Certificates Using SCEP (paloaltonetworks.com)

[Raido_Rattameister]

Group Policy can enroll personal certs from enterprise PKI and install into computers.

GlobalProtect can configured to trust certs signed by enterprise CA.

If no internal CA then you can generate certs in Palo and install them manually into user laptops.