Global Protect Intermediate Certificate Expiring

[Cmartineztech]

Hello,

I have a certificate on my Global Protect configuration that will expire in 4 months. The root expires in 2031 while the intermediate expires in 2022. To renew the intermediate do I just click the renew option for that cert or do I need to submit a new CSR for this?

[LAYER_8 · Accepted solution]

The process is pretty easy! Please see our guide here. There are limitations with this approach. However, I do see yours have external validation, which may complicate the process significantly, please see this thread.  

[Cmartineztech]

Thanks for the info. And when submitting the CSR I'm being asked to choose IIS, Tomcat, or Apache... which web server type does Palo Alto use?

[BPry · Accepted solution]

@Cmartineztech,

You would want to select Apache.