04-15-2025 04:18 PM
Hello,
We have implemented the GlobalProtect. We are in the progress to migrate our PKI environment to new platform. One thing that I would like to test properly before we go ahead for the big band cutover, We are thinking to try this method "One Cert Profile with extra certificates"
In the Certificate Profile, we have configured using the current Root Cert. Is that possible for me to "Add" another Root Certificate that is from the new PKI infrastructure?
Will there be any affect to the existing VPN users? Thanks.
04-16-2025 09:25 PM - edited 04-16-2025 09:25 PM
Hi @TimothyL_MTS ,
As long as both CAs are valid and the client certs are correctly issued, existing users should not be impacted, and new users should be able to connect.
Hope this helps and please keep us posted on how it goes!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
