Generate the Panorama Node Certificate

Log in to the Panorama web interface of the Panorama Controller.
Select
Panorama
Certificate Management
Certificates
and
Generate
a new certificate:
For the

Certificate Type

, select

Local

.

SCEP is currently not supported.

Enter a

Certificate Name

, such as

panorama-node1_cert

. The name is case-sensitive and can have up to 31 characters. It must be unique and use only letters, numbers, hyphens, and underscores.

In the

Common Name

field, enter the serial number of the Panorama Node.

The serial number must be entered in the

Common Name

field in order to authenticate the connection between the Panorama Controller and Panorama Node. The Panorama Node cannot connect to the Panorama Controller if the serial number is not entered in this field.

In the

Signed By

field, select the CA certificate.

Generate

the certificate.


Click
Commit
and
Commit to Panorama
.
Export the certificates for each Panorama Node you generated.
Select
Panorama
Certificate Management
Certificates
, select the certificate, and
Export Certificate
.
Select the
File Format
:
Base64 Encoded Certificate (PEM)
—Allows you to export the certificate and private key separately. If you want the exported file to include the private key, select the
Export Private Key
check box.
Encrypted Private Key and Certificate (PKCS12)
— Export the certificate and private in a single file.
Check the
Export private key
box.
Enter a
Passphrase
and
Confirm Passphrase
to encrypt the private key. This passphrase is when importing the certificate key to the Panorama Nodes.
Click
OK
and save the certificate/key file to your computer.

Enter a descriptive file name for the certificate so that you can easily identify the Panorama Node it needs to be imported to, and
Save
the certificate.
Import the certificate in to each Panorama Node.
Log in to the Panorama web interface of the Panorama Node.
Select
Panorama
Certificate Management
Certificates
, and
Import
a certificate:
For the
Certificate Type
, select
Local
.
SCEP is currently not supported.
Enter the same
Certificate Name
.The name is case-sensitive and can have up to 31 characters. It must be unique and use only letters, numbers, hyphens, and underscores.
Browse
for the certificate you exported in the previous step.
Check the
Import private key
box.
Enter the
Passphrase
and
Confirm Passphrase
used to encrypt the private key.
Click
OK
to import the certificate.

Click
Commit
and
Commit to Panorama
.