05-14-2026 12:58 PM
Hi everyone,
I’m running PAN-OS 11.2.8 with Multi-VSYS enabled (3 VSYS). I need a different Forward Trust Certificate per VSYS for SSL decryption, but since my certificates are imported in the Shared store, I can only select one Forward Trust Certificate globally.
Should I import the certificates directly at the VSYS level instead of Shared to fix this?
Any help is appreciated!
05-21-2026 06:02 AM
Hi @badermandhouj ,
Correct. Check out the following DOC and particularly steps 3 and 5:
Step 3 : If the firewall has more than one virtual system (vsys), select a Location (vsys or Shared) for the certificate.
Step 5 : To make the certificate available to all virtual systems, select the Shared check box. This check box appears only if the firewall supports multiple virtual systems.
Kind regards,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
