Upcoming November 18, 2024 Deadline for NGFW User-ID and Terminal Server (TS) Agent Certificate Expiration

[notimben]

Hello,

trying to figure out the user-id thing, and if we are affected.

Referring to text in the screen shot below - how does that system log message look like ? and should have been showed after the install of 8912-9060 update ? 

[zahmed01]

Hello,

The system log should look something like this: 

"Updates required for NGFW customers of User-ID by November 18, 2024. Review the updated advisory to ensure you have taken the required actions."

For information on the User ID Cert issue feel free to follow these steps from the FAQ on the main advisory:

User-ID FAQS

1. Are there any automation tools available to show the status of the User-ID and Terminal Server (TS) agent Self-signed Certificates in my environment?

An open-source userid-check tool is available on github to determine the PAN-OS Version and User-ID/Terminal Server Agent Version currently running on your Palo Alto Networks devices and UserID/Terminal Server Agents. The primary objective is to ensure that your devices operate on a PAN-OS and Agent version unaffected by the expiration of certificates on November 18th, 2024.  Please note, that this tool is released "as-is" with no warranty or support. This is a community supported tool and Palo Alto Networks may contribute its expertise at its discretion.

[notimben]

Thanks . If i dont find that message - does that mean that i dont have to do something ? That is my understanding reading the advisory at least

[Camramirez]

Thanks, that tool is perfect, I verified that the upcoming NGFW User ID Agent and Terminal Server certificate expiration date of November 18, 2024, does not affect us.