Focus

Import a Private Key for IKE Gateway and Block It

Table of Contents

Secure private keys for IKE Gateways that you import into PAN-OS devices by blocking key export.

Block the export of a private key to prevent its misuse after generating a certificate for IKE Gateway authentication.

Select NetworkNetwork ProfilesIKE Gateways.
Add a new IKE Gateway.
On the General tab, for Authentication, select Certificate.
For Local Certificate select Import or Generate depending on whether you want to import an existing certificate or create a certificate.
Enter the certificate information. If you are importing the certificate, select Import Private Key to activate the Block Private Key Export checkbox.
Select Block Private Key Export to prevent anyone from exporting the key.
For importing a certificate, enter and confirm the Passphrase and then click OK

For generating a certificate, click Generate.
Enter the Passphrase, confirm it, and then click OK.