SSL decryption Certificate expired

[VishnuPS]

Hi Team,

We have PA self signed certificate in the firewall being used for SSL Decryption, the certificate is about to expire

From GUI we can able to renew for another one year but our concern

• Will it automatically replace the existing certificate in end machine
• Or do we need to push the new certificate to end machines to take effect
• Or no action required

Kindly suggest the best practice 

[SteveCantwell · Accepted solution]

Hello there

You will need to extend your cert (I always recommend 5 yrs vs 1yr, to avoid this exact issue) and you will need to push the cert to all devices, using GPO, SCCM, or similar technique.

What other questions can we answer for you?

[VishnuPS]

Thank you steve.