Strata Copilot
    Next-Gen Trust Security
    : Assigning or reassigning a certificate to an application
    Focus
    Focus
    1. Home
    2. Next‑Gen Trust Security
    3. Next-Gen Trust Security
    4. Next-Gen Trust Security overview
    5. Managing discovered certificates to protect your machine identities
    6. Assigning or reassigning a certificate to an application

    Next-Gen Trust Security

    Assigning or reassigning a certificate to an application

    Table of Contents

    Assigning or reassigning a certificate to an application

    Discovery finds and brings into your inventory many certificates that have not been assigned to an application. Next-Gen Trust Security allows you to assign these certificates to their appropriate applications.
    Before assigning or reassigning certificates to applications, wait until after certificate discovery is complete.

    To find unassigned certificates

    1. Sign in to Next-Gen Trust Security.
    2. Click Inventory > Certificates.
    3. At the top of the inventory, click Filters:
      • In the Columns dropdown list, select Applications.
      • In the Operator dropdown list, select in.
      • In the Value dropdown list, select Not assigned to an application.
      A re-filtered certificate list is displayed.

    To assign a certificate to an application

    1. Select one or more certificates that you want to assign to one or more applications by clicking the checkboxes next to the certificates.
    2. At the top of the inventory, click Assign to Application > Assign to Application.
    3. In Assign applications dropdown list, specify the application(s) to which you want to assign the certificate(s).
    4. If you want to replace existing application assignments for the selected certificates, click the Replace current application assignments checkbox.
    5. Click Assign.
      You'll see a notification that the certificate was assigned to the application.

    To remove a certificate's assignment to an application

    1. Filter or search the certificate inventory to find the certificate you want to change.
    2. In the certificate list, select the certificate(s) you want to remove from the application(s) by clicking the checkbox next to the certificate.
    3. Click Assign to Application > Clear.
      You'll see a notification that the certificate was removed from the application(s).

    © 2026 Palo Alto Networks, Inc. All rights reserved.