PA traps certificate expired

[soporteseguridad]

Hi,

We have ESM Console and server using SSL certificate. This  certificate has expired so we lost communication between traps and agents, and we only connect to ESM from the own server.

How can i renew the certificate SSL???? Its mandatory to install executable installation traps again?

thanks 

[OtakarKlier]

Hello,

While I'm not a traps expert, you might want to contact Support on this as it sounds like its time sensitive.

Regards,

[soporteseguridad]

Reviewing the PA traps documentation i see that this SSL certificate is selected when you install the .exe server or console. So the only way to change the certificate is reinstall server and console executables?  

[jvalentine]

Yes, this is the process I took when my SSL certificate expired.  It was quick and painless.  

[soporteseguridad]

😞 The config is saved right. so if we reinstall we wont lose trpas config in server and core, right?

[jvalentine]

That was the case when I renewed my certificate.  The config is stored in a database that exists independently of the ESM/Core functions.  Take a backup/snapshot of your ESM before starting, just in case you have any issues.  it wouldn't hurt to contact TAC either and validate the procedure.  

[soporteseguridad · Accepted solution]

Hi,

We solve the problem renewwing the certificate via CMD and ISS. It wasnt neccesary to reinstall.

[GabrielBryson]

 HI, sorry you mentioned you solved this by "We solve the problem renewing the certificate via CMD and ISS. It wasnt neccesary to reinstall." Could you please explain a little more what you meant, did you mean to say using CMD line and IIS???

Thanks

[LukeBullimore]

Hi @GabrielBryson

Please see the below documentation.

https://live.paloaltonetworks.com/t5/Endpoint-Articles/Traps-on-the-Endpoint-Security-Manager-Loses-...

Thanks,

Luke.

[marsta]

Hi guys.

  I was trying to find this document https://live.paloaltonetworks.com/t5/Endpoint-Articles/Traps-on-the-Endpoint-Security-Manager-Loses-... which is mentioned in other posts as a solution however it is impossible to open it (homepage of live.paloaltonetwroks.com is opening instead).

 Does somebody has an idea where to find it?

Thx in adv 🙂 

[LukeBullimore]

Hey @marsta

The solutions part of the Live forums recently migrated over to "Knowledgebase" on the Support Portal.

Try the below link 🙂

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClPWCA0

Cheers,

Luke.

[BigPalo]

These are the steps to solve the certificate issue:

Nothing to do in ESM application. Everything in CMD and IIS Manager.

[GabrielBryson]

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClPWCA0

Try this link it works for me

Gabriel