To strengthen your Security posture when onboarding
new firewalls, Log Collectors, and WildFire appliances to a Panorama™
management server, create a device registration authentication key
for mutual authentication between a new device and the Panorama
management server on first connection. You can configure an authentication
key with specific values: the key lifetime, the count to determine
number of times you can use the device registration auth key to
onboard new firewalls, a list of one or more serial numbers for
which the device registration auth key is valid, and specify which
type of devices the authentication key is valid. After you create
an authentication key on Panorama, you must add it to the new firewall,
Log Collector, or WildFire appliance during onboarding to Panorama
management.
Device Registration Auth
Key Fields
Description
Name
Name of the device registration auth key.
The name is case-sensitive, must be unique across the entire device
group hierarchy, and can contain only letters, numbers, spaces,
hyphens, and underscores.
Lifetime
Key lifetime displays the number of days,
hours, and minutes the device registration auth key is valid to
onboard new firewalls, Log Collectors, and WildFire appliances.
Count
Number of times you can use the device registration
auth key to onboard new firewalls, Log Collectors, and WildFire
appliances.
Serial
Serial number of one or more new firewalls,
Log Collectors, and WildFire appliances for which the device registration
auth key is valid.
Type
Type of device for which authentication
key is valid (Any, Firewalls,
or Log Collectors).
Add a Device Registration Auth Key
Add and configure a device registration auth key to
onboard new firewalls, Log Collectors, and WildFire appliances to
Panorama.
Device Registration Auth
Key Settings
Description
Name
Enter a name to identify the device registration
auth key. The name is case-sensitive, must be unique across the
entire device group hierarchy, and can contain only letters, numbers,
spaces, hyphens, and underscores.
Lifetime
Specify the key lifetime for how long you
can use the device registration auth key may to onboard new firewalls,
Log Collectors, and WildFire apliances.
Count
Specify how many times you can use the authentication
key to onboard new firewalls, Log Collectors, and WildFire appliances.
Device Type
Specify for which devices you can use the
device registration auth key: Firewalls, Log
Collectors, or Any (default).
Devices
Enter the firewall, Log Collector, and WildFire
appliance serial numbers to specify for which firewalls, Log Collectors,
and WildFire appliances the device registration auth key is valid.
