SSL decryption Certificate expired

[VishnuPS]

Hi Team,

We have PA self signed certificate in the firewall being used for SSL Decryption, the certificate is about to expire

From GUI we can able to renew for another one year but our concern

• Will it automatically replace the existing certificate in end machine
• Or do we need to push the new certificate to end machines to take effect
• Or no action required

Kindly suggest the best practice 

[SCantwell_IM · Accepted solution]

Hello there

You will need to extend your cert (I always recommend 5 yrs vs 1yr, to avoid this exact issue) and you will need to push the cert to all devices, using GPO, SCCM, or similar technique.

What other questions can we answer for you?

[VishnuPS]

Thank you steve.

[jorge_pan]

I still had a doubt.

In the case of certificate renewal, for example, the current certificate used for decrupt (self-signed) expires on 03/30/2024, and I decide to renew it today, clicking on renew and placing it for another 365 days, from that moment on. Will it have any impact on the environment? Or did the desktops continue to work (without the warning appearing in the insecure website browser) until 03/30/2024, or when I renew I already have to immediately deploy the new certificate? this is my doubt.