Global protect A valid client cert is required

[gus0095]

Hi, we're having a couple of issues with users after our security team updated firewall and GP client to v6.2.6 whereby a few of them are getting the error message attached all of the sudden stating that a valid cert is required. We do not use OID and I suspect the client is just picking up the wrong cert but I cannot get the client to prompt user to re-select the cert again, only way I have found to do this is to re-install the GP client which is not ideal. Is there an 'easier' way to get the client to prompt user for cert selection? Thanks!

[JayGolf]

Hi @gus0095 ,

You can have them try clearing the ClientCert.cer .It should be in the/Users/user/Library/Application Support/PaloAltoNetworks/GlobalProtect directory for mac users. Also try clearing .dat files for GP 

If it still persists, are the other certs that pop up still needed? Id look into removing if not needed.