How to use a Machine Cert with a Private Key for Global protect prelogon

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

How to use a Machine Cert with a Private Key for Global protect prelogon

L0 Member

Greetings,

 

We utilize our own PKI infrastructure so the certificates we want to use for prelogon are already in place. I am also new to this so it may be working as designed but having a hard time validating.

 

We have imported a rootCA into Strata Cloud Manager the resides in Trusted Root CA on windows 

We have an Intermediate CA signed by the rootCA also imported into stata cloud manger that resides in Intermediate CA on windows

 

We have a cert profile containing both the certificates above with the user name field set to none. 

 

All of our devices have a personal machine certificate signed by the Intermediate CA. How do I make sure we are utilizing this personal machine certificate for prelogon.  

1 REPLY 1

L3 Networker

If there's only one cert in the machine store, GP will use that cert. If you have multiple machine certs, you can enable certificate selection based on OID, it's all explained here How Does the App Know Which Certificate to Supply? (paloaltonetworks.com)

  • 307 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!