Update of Default Trusted Certificate Authorities?

[sylvia]

I am just curious - in which way is the list of trusted certificate authorities (WebUI: Device > Certificate Management > Certificates Default Trusted Certificate Authorites) updated? By firmware update or by dynamic update?

Regards,

Sylvia

[PhilH]

Hi Sylvia,

It is my understanding that it is done via software updates. But i am not certain, sorry.

-Phil

[Jean-BrunoEmonet]

Hi,

If one of the default trusted CA is compromised, do we have to wait for a new software update and disable manually the CA on the firewall?

Or could a dynamic update be released to fix it?

Thanks

JB

[RaphCarvalho]

Hello, 

Facing to a similar issue at the moment, is there any update on the below ?

Thanks

[Raido_Rattameister]

List of trusted root CAs is updated with PANOS not with dynamic updates.