Certificate Management

The following topics describe the different keys and certificates that Palo Alto Networks® firewalls and Panorama use, and how to obtain and manage them:

Keys and Certificates

Default Trusted Certificate Authorities (CAs)

Certificate Revocation

Certificate Deployment

Set Up Verification for Certificate Revocation Status

Configure the Master Key

Obtain Certificates

Export a Certificate and Private Key

Configure a Certificate Profile

Configure an SSL/TLS Service Profile

Replace the Certificate for Inbound Management Traffic

Configure the Key Size for SSL Forward Proxy Server Certificates

Revoke and Renew Certificates

Secure Keys with a Hardware Security Module