Loading Multiple Certificates

[u4108]

What is the maximum number of certificates you can install on a box?

[spolo]

While I'm not sure I know the answer to this question, you might need to be more specific:  What are you intending to use the certificate for?  SSL forward proxy?  Trusted CA?  SSL VPN/SSL Inbound Inspection/Captive Portal?  Web Admin?  Client CA?  Client OCSP Verify CA?  And does any of this matter since you're likely only going to have one as the active certificate for each of these functions?

You can load at least one for each of these, but I get the sense that your use case might be broader than this.

[u4108]

Specifically, how many different inbound SSL certificates can you load on a box.

[spolo · Accepted solution]

It varies by platform, but here's a breakdown:

PAN-OS 3.1	PA-4060	PA-4050	PA-4020	PA-2050	PA-2020	PA-500
Max SSL Inbound Certificates	300	300	35	25	25	25

[u4108]

Thanks!

[jwolach]

Do you have updated information on MAX Inbound certificate limits for the PA-5000 series?

Thanks,

Jeff

[gswcowboy]

Max SSL   inbound certificates   1000(PA-5060)   300(PA-5050)   100(PA-5020)

[tbloyer]

Are these stats still relevant?

What are the maximum certificates for a PA-200 as of January 2015?

[HULK]

Hello tbloyer,

FYI.

	PA-7050	PA-5060	PA-5050	PA-5020	PA-4060	PA-4050	PA-4020	PA-3050	PA-3020	PA-2050	PA-2020	PA-500	PA-200
Max SSL inbound certificates	4,000	1000	300	100	300	300	25	25	25	25	25	25	25

Thanks