SSL Certificates import

[a.jones]

Hi All,

I need to import some SSL certificates for a Global Protect instance. Customer has already supplied me with their wildcard certificates which I have imported but I cannot select them when creating an SSL/TLS Service Profile. Can I set up this way or should I generate the CSR from the firewall and get the certificates created for me?

Regards

Adrian

[aleksandar.astardzhiev · Accepted solution]

Hi @a.jones,

When creating SSL/TLS profile, firewall will not allow you to select ceritificate that doesn't have private key imported - it wouldn't show up in the dropdown list.

So I am guessing that your customer have provide you only the public key - the certificate, but didn't send you the private key for it.

You can confirm that by  checking the uploaded certificate via the GUI. Go to Device -> Ceritificate Management -> Certificates and see if the certificate have a check for key

If that is correct you have two options:

- Request again from user to send you PKCS 12 (.p12) which is combination of both private and public key

- Generate a CSR and send it to the customer to sign it.

As you mentioned that your customer is using wildcard certificate I believe that your prefferable option will be the first one. Because creating CSR will meand that customer will need to re-issue their wildcard ceritifcate.

[a.jones]

Thanks. As I posted this originally I was chasing the customer for a private key. It has taken two weeks to get but the solution now works. Thanks for the info.