Disable the export of private keys generated on PAN-OS devices to prevent
unauthorized use.
To prevent the misuse of a private key after generating a certificate, you can
permanently block the export of the corresponding private key. You can only enable
the Block Private Key Export option at the time of generating
or importing a certificate onto PAN-OS.
If you generate self-signed certificates on the firewall or Panorama and apply
the block private key export option, you can’t export the certificate and key to
other PAN-OS appliances.
