I try to configure the ssl decryption on my cluster of PA-220. I have an internal PKI based on Microsoft solution. On the first node, I'm able to generate the request, the csr has been validated by the PKI server and I'm able to export from the PKI the certificate (base-64 encoded). I'm able to import the certificat in my PA-220 device without error but when I try to enable "Forward Trust Certificate" and "Forward Untrust Certificate" options, I can't select these options.
Why these options are not available ?
First, I imported on the device the root-ca certificate. After, I generated a new certificat and specify External Authority in the option Signed By.
After, I exported the CSR and I validate the CSR on my PKI server. I exported the certificate from my PKI server as a based-64 format and import the certificate in the device (without error). But I can't select the option "Forward Trust Certificate" on the certificate information.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!