My Global protect VPN certificate is expiring soon. How to renew it

[shafi021]

My Global protect VPN certificate is expiring soon. How to renew the certificate. System engineer provider me certificate in .p12 format. This is my first time to do cert renewal. Please guide me. Thank you.

[shafi021]

@OwenFuller can you please help me on this 🙂

[OwenFuller · Accepted solution]

I assume you mean the portal/gateway server certificate is expiring.  You should be able to go to Device > Certificates > Import.  From there you can select "Encrypted Private Key and Certificate (PCKS12) from the File Format drop-down menu.  You'll need the password used by the sysadmin to encrypt the certificate as well.  

Once you've imported the new certificate, you'll want to go to Device > SSL/TLS Service Profile, open whichever SSL/TLS profile is used on your GlobalProtect gateway/portal, and select your new cert in the certificate drop-down.

[shafi021]

Yes, I have password for cert. Thanks Owen. You are so helpful. 

[shafi021]

@OwenFuller My existing cert name is 'MyCompanyName'. I want to use same name 'MyCompanyName' for new cert, so do I need to revoke  old 'MyCompanyName' cert first and then import the new cert with same name? I have scheduled maintenance window.