Other Supported Actions to Manage Certificates
After you generate the certificate, its details display
on the page and the following actions are available:
Other Supported Actions
to Manage Certificates | Description |
---|---|
Delete | Select the certificate and Delete it.If
the firewall has a decryption policy, you cannot delete a certificate
for which usage is set to Forward Trust Certificate or Forward
Untrust Certificate . To change the certificate usage,
see Manage
Default Trusted Certificate Authorities. |
Revoke | Select the certificate that you want to
revoke, and click Revoke . The certificate
will be instantly set to revoked status. No commit is required. |
Renew | In case a certificate expires or is about
to expire, select the corresponding certificate and click Renew . Set
the validity period (in days) for the certificate and click OK .If
the firewall is the CA that issued the certificate, the firewall replaces
it with a new certificate that has a different serial number but the
same attributes as the old certificate. If an external certificate
authority (CA) signed the certificate and the firewall uses the
Online Certificate Status Protocol (OCSP) to verify certificate
revocation status, the firewall uses the OCSP responder information
to update the certificate status |
Import | Import a certificate
and configure as follows:
When
you import a certificate to a Palo Alto Networks firewall or Panorama
server that is in FIPS-CC mode, you must import the certificate
as a Base64-Encoded Certificate (PEM) and you must encrypt the private
key with AES. Also, you must use SHA1 as the passphrase-based key
derivation method. To import a PKCS12 certificate,
convert the certificate to the PEM format (using a tool such as
OpenSSL); ensure that the password phrase you use during conversion
is at least six characters. |
Export | Select the certificate you want to export,
click Export , and select a File Format :
|
Import HA Key | The HA keys must be swapped
across both the firewalls peers; that is the key from firewall 1
must be exported and then imported in to firewall 2 and vice versa. To
import keys for high availability (HA), click Import
HA Key and Browse to specify
the key file for import.To export keys for HA, click Export
HA Key and specify a location to save the file. |
Export HA Key | |
Define the usage of the certificate | In the Name column, select
the certificate and then select options appropriate for how you
plan to use the certificate. |
PDF/CSV | Administrative roles with a minimum of read-only
access can export the managed certificate configuration table as PDF/CSV .
You can apply filters to create more specific table configuration
outputs for things such as audits. Only visible columns in the web
interface will be exported. See Configuration
Table Export. |
Recommended For You
Recommended Videos
Recommended videos not found.