08-07-2025 09:02 PM
What is the process when migrating certs?
are the added when new palo joins the device group?
do I need to import export the top level cert?
do I need to import the trusted root provided by customer or can I use what is already on the old palo?
thank you
08-11-2025 04:06 AM
Hello,
When you bring a new Palo Alto firewall into a device group via Panorama (or replace an old firewall), Panorama does not automatically copy certificates from the old device to the new one. Certificates live in the firewall’s local certificate store, not in the device group configuration, so you have to move them manually.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
