Certificate Renewal for Autonomous Digital Experience Management
Focus
Focus
Autonomous DEM

Certificate Renewal for Autonomous Digital Experience Management

Table of Contents

Certificate Renewal for Autonomous Digital Experience Management

You must renew your GlobalProtect log collection certificate before it expires.
Where Can I Use This?What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
  • Strata Cloud Manager
  • Prisma Access license
  • Autonomous DEM license
The GlobalProtect log collection certificate is required in order for the endpoint to communicate with the ADEM portal. So, when the certificate expires, communication to the portal from the endpoint is lost. This results in data loss, since the metrics collected on the endpoint do not reach the portal and hence do not show up on the portal.
Be sure to renew your GlobalProtect log collection certificate before it expires. Follow these steps to renew the certificate:

Panorama

Administrators have to manually update the certificate by performing these steps:
  1. Click the Panorama tab.
  2. Click Cloud ServicesConfiguration in the left panel.
  3. Under GlobalProtect App Log Collection and Autonomous DEM section, click Renew Certificate for GlobalProtect App Log Collection and Autonomous DEM to renew the certificate.

Strata Cloud Manager

In the Strata Cloud Manager,
  1. Go to ManageCertificate ManagementCertificates tab.
  2. Under Palo Alto Network Issued certificates section, select GP Log Certificate and click Renew to renew the certificate.