S2S VPNs using Self-signed Certificates

[ET]

What is the procedure for configuring Site-to-Site VPNs using self-signed certificates?

For example, we need to establish a VPN between Firewall A and Firewall B.

The documentation describes how to create a self-signed Root CA certificate, but it doesn’t explain the subsequent steps related to certificate handling, such as:

• creating the certificates for Firewall A and Firewall B,

• signing those certificates,

• importing the keys for each firewall,

• and clarifying exactly what should be imported to each firewall (Root CA, Root CA key, Firewall A certificate, Firewall B certificate, Firewall A key, Firewall B key).

Thanks in advance!

[TomYoung]

Hi @ET ,

Just a few posts below yours was this one!

https://live.paloaltonetworks.com/t5/general-topics/how-to-configure-a-site-to-site-vpn-with-self-si...

Thanks,

Tom

[ET]

A have added some clarification to the original post with more accurate questions