Change a Client Certificate

Obtain or generate the device certificate.
You can deploy certificates on Panorama or a server Log Collector by generating a self-signed certificate on Panorama or obtaining a certificate from your enterprise CA or a trusted third-party CA.
Set the common name to $UDID or subject to CN=$UDID (in the SCEP profile) if authorizing client devices based on serial number.
You can generate a self-signed certificate on Panorama or obtain a certificate from your enterprise CA or a trusted third-party CA.
If you are using SCEP for the device certificate, configure a SCEP profile. SCEP allows you to automatically deploy certificates to managed devices. When a new client devices with a SCEP profile attempts to authenticate with Panorama, the certificate is sent by the SCEP server to the device.
Change the certificate in the certificate profile.
Select
Device
Certificate Management
Certificate Profile
and select the certificate profile.
Under CA Certificates,
Add
the new certificate to assign to the certificate profile.
Click
OK
.
Commit
your changes.