How to use a Machine Cert with a Private Key for Global protect prelogon

[E.Hartmann]

Greetings,

We utilize our own PKI infrastructure so the certificates we want to use for prelogon are already in place. I am also new to this so it may be working as designed but having a hard time validating.

We have imported a rootCA into Strata Cloud Manager the resides in Trusted Root CA on windows 

We have an Intermediate CA signed by the rootCA also imported into stata cloud manger that resides in Intermediate CA on windows

We have a cert profile containing both the certificates above with the user name field set to none. 

All of our devices have a personal machine certificate signed by the Intermediate CA. How do I make sure we are utilizing this personal machine certificate for prelogon.  

[mb_equate]

If there's only one cert in the machine store, GP will use that cert. If you have multiple machine certs, you can enable certificate selection based on OID, it's all explained here How Does the App Know Which Certificate to Supply? (paloaltonetworks.com)