Focus

PAN-OS Web Interface Reference

Manage Default Trusted Certificate Authorities

Table of Contents

Manage Default Trusted Certificate Authorities

Device > Certificate Management > Certificates > Default Trusted Certificate Authorities

Use this page to view, disable, or export, the pre-included certificate authorities (CAs) that the firewall trusts. The pre-installed list of CAs includes the most common and trusted certificate providers responsible for issuing the certificates the firewall requires to secure connections to the internet. For each trusted root CA, the name, subject, issuer, expiration date and validity status are displayed.

The firewall does not trust intermediate CAs by default because intermediate CAs are not a part of the chain of trust between the firewall and the trusted root CA. You must manually add any intermediate CAs that you want the firewall to trust, along with any additional trusted enterprise CAs that your organization requires (DeviceCertificate ManagementCertificatesDevice Certificates).

Trusted Certificate Authorities Settings	Description
Enable	If you disabled a CA, you can re-Enable it.
Disable	Select the CA and Disable it. You might use this option to trust only specific CAs or to disable all other CAs and trust only your local CA.
Export	Select and Export the CA certificate. You can import into another system or view the certificate offline.

Other Supported Actions to Manage Certificates

Device > Certificate Management > Certificate Profile