12-12-2022 07:19 AM
I just upgraded PA-820 from PAN-OS 10.2 to 11 and when I try to access the GUI in Chrome I get the following error:
ERR_SSL_KEY_USAGE_INCOMPATIBLE
I can access an SSH command line session.
Suggestions on correcting this?
12-13-2022 06:45 AM
This is a certificate error. Resolved by following this:
Resolution
Option1:
> configure
# delete deviceconfig system ssl-tls-service-profile
# delete shared ssl-tls-service-profile profile-1
# commit
# exit
Example below:
> request certificate generate ca yes certificate-name <cert name> name <IP or FQDN> algorithm RSA rsa-nbits 2048
> configure
# set shared ssl-tls-service-profile <profile name> certificate <cert name> protocol-settings min-version tls1-0 max-version tls1-2
# set deviceconfig system ssl-tls-service-profile <profile name>
# commit
# exit
12-13-2022 06:45 AM
This is a certificate error. Resolved by following this:
Resolution
Option1:
> configure
# delete deviceconfig system ssl-tls-service-profile
# delete shared ssl-tls-service-profile profile-1
# commit
# exit
Example below:
> request certificate generate ca yes certificate-name <cert name> name <IP or FQDN> algorithm RSA rsa-nbits 2048
> configure
# set shared ssl-tls-service-profile <profile name> certificate <cert name> protocol-settings min-version tls1-0 max-version tls1-2
# set deviceconfig system ssl-tls-service-profile <profile name>
# commit
# exit
01-06-2023 05:46 PM
Thank you for great sharing @ksuplicki
only for information Palo Alto has released an official KB for this issue: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000saCQCAY
Kind Regards
Pavel
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!