Certificate Renewal for Autonomous Digital Experience Management
You must renew your GlobalProtect log collection certificate before it
expires.
Where Can I Use
This?
What Do I Need?
Prisma Access (Managed by Strata Cloud Manager)
Prisma Access (Managed by Panorama)
Strata Cloud Manager
Prisma Access license
Autonomous DEM license
The GlobalProtect log collection certificate is required in order for the
endpoint to communicate with the ADEM portal. So, when the certificate expires,
communication to the portal from the endpoint is lost. This results in data loss,
since the metrics collected on the endpoint do not reach the portal and hence do not
show up on the portal.
Be sure to renew your GlobalProtect log collection certificate before it
expires. Follow these steps to renew the certificate:
Panorama
Administrators have to manually update the certificate by performing these
steps:
Click the Panorama tab.
Click Cloud ServicesConfiguration in the left panel.
Under GlobalProtect App Log Collection and Autonomous DEM section, click Renew
Certificate for GlobalProtect App Log Collection and Autonomous DEM to renew the certificate.
Strata Cloud Manager
In the Strata Cloud Manager,
Go to ManageCertificate ManagementCertificates tab.
Under Palo Alto Network Issued certificates section,
select GP Log Certificate and click
Renew to renew the certificate.