IPSec VPN certificates

[ldapjazz]

I’m very new to Palo Alto and testing things out on a home virtual lab on local computer.  I’m trying to configure IPSec vpn between 2 sites using certificates.  My problem is that when I export the certificate from PA-1, I cannot import it to PA-2 because I don’t know where FW-1 has saved it on the windows 10 pc being used to manage the firewalls.

Is it possible to manually copy the certificate from PA-1 and save it to the windows 10 desktop where I can then upload it to PA-2?  Can anyone help?

[nikoolayy1 · Accepted solution]

You may try and play using SCP for ssh file transfer (it is used for congfig but you can try using it for ssh):

https://live.paloaltonetworks.com/t5/general-topics/unable-to-export-certificates/td-p/322136

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-cli-quick-start/use-the-cli/use-secure-copy-to-i...

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-cli-quick-start/use-the-cli/use-secure-copy-to-i...

[ldapjazz]

Thanks Nikolay.  The first link yielded a solution for me.  I used Internet Explorer.  Microsoft Edge also worked but not firefox or chrome.