Palo Alto Login issue though GUI " ERR_SSL_KEY_USAGE_INCOMPATIBLE " (Solved)

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Palo Alto Login issue though GUI " ERR_SSL_KEY_USAGE_INCOMPATIBLE " (Solved)

L1 Bithead

For the last few days, we have been experiencing an issue with logging in to the Palo Alto Firewall through the GUI. We are getting the below error from the browser during login.




After that, we contacted TAC support but they were unable to solve this issue, and they suspected this issue happened due to the browser. Today morning we were able to solve this issue by the below command. 
> configure
# delete deviceconfig system ssl-tls-service-profile
# commit
# exit

L2 Linker

It is the issue with chrome not an issue of the firewall you will be able use Microsoft Edge and Mozilla Firefox and it will work.

There is a workaround you do for chrome:

Open registry editor and go to the following path:

> Right-click and > Add a new DWORD (32-bit) Value ,Changed the Name to RSAKeyUsageForLocalAnchorsEnabled and set the value as the default (00000000). 



Close chrome and open again. You can reach out to to google through google support form for editing the key usage field and also check with your Certificate authority.


This is not only for Chrome we also experienced issues with the Mozilla browser. Only MS-EDGE is working

oh ok, but yeah as I said the issue from these browsers for key usage field in certificates you can check on their support forms to check if there any fix version or you can follow the same work around


L2 Linker

my colleague found this article in the PA knowledgebase that seems to explain and resolve the issue:


The captive portal page cannot be opened with an ERR_SSL_KEY_US... - Knowledge Base - Palo Alto Netw...



Please mark helpful responses, so others know as well

This one does not apply to another browser instead of Chrome.

  • 5 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!