managing digital certificates and globalprotect gw certificate with panorama for vm series firewall

[AJ-Parashar]

I am managing two vm series palos deployed in azure with panorama with active active configuration. All configurations are synced with panorama and everything works except the certificates. I just not getting how to set up certificates for both firewalls individually for both gui access and for globalprotect.

I have searched but cant find a solution.

Any help will be appreciated

[addawes]

Regarding the GUI certs - do you have separate device templates for each firewall? If so you can push the respective certs to each template so they receive their individualized certificate. Then setup a SSL/TLS profile, associate the respective cert, then associate the SSL/TLS profile to the Device-General Settings box.

For the GP cert - you can upload the same certificate to both firewalls. Create a GP SSL/TLS profile and associate it to your GP portal and gateway.