Set Up Authentication Using Custom Certificates on WildFire Appliances and Clusters

Use custom certificates to establish a unique chain of trust that ensures mutual authentication between a WildFire® appliance and other Palo Alto Networks® firewalls and appliances
By default, a WildFire® appliance uses predefined certificates for mutual authentication with other Palo Alto Networks® firewalls and appliances to establish the SSL connections used for management access and inter-device communication. However, you can configure authentication using custom certificates instead. Custom certificates allow you to establish a unique chain of trust to ensure mutual authentication betweenyour WildFire appliance or WildFire cluster managed by Panorama™ and firewalls. You can generate these certificates locally on Panorama or the firewall, obtain them from a trusted third-party certificate authority (CA), or obtain certificates from enterprise private key infrastructure (PKI).
For more information about using custom certificates, see How Are SSL/TLS Connections Mutually Authenticated?

Related Documentation