Install a Device Certificate
Table of Contents
Install a Device Certificate
Install a device certificate from the firewall.
Your next-generation firewall can leverage
cloud services such as Device Telemetry and IoT. To do this, you
must install a device certificate to successfully authenticate the
firewall with the Palo Alto Networks Customer Support Portal (CSP)
to leverage these cloud services. The circumstances under which
a device certificate is required will differ from feature to feature,
so install a device certificate only if the feature's setup documentation
tells you that this needs to be done.
You only need to install
a device certificate once. Every feature that uses device certificates
will use the certificate installed on your firewall if it already
exists.
You can install a device certificate to firewalls
that are managed by
Panorama. If you want to install a device certificate directly
to a single next-generation firewall (that is, you are not using
Panorama):
- Generate the One Time Password (OTP).
- Log in to the Customer Support Portal.
- Select and Generate OTP.
- For the Device Type, select Generate OTP for Next-Gen Firewalls.
- Select your PAN OS Device serial number.
- Generate OTP and copy the OTP.
- Log in to your next-generation firewall as an admin user.
- Select and Get
certificate.
![]()
- Paste the One-time Password you generated and click OK.
- Your next-generation firewall successfully retrieves and installs the certificate.
