Assign and push a single, shared certificate to an entire
WildFire® cluster.
Instead of assigning unique certificates to
each WildFire® appliance in a cluster, you can assign a single,
shared client certificate to the entire WildFire cluster, which,
in turn, allows you to push a single certificate to all WildFire
appliances in the cluster instead of configuring separate certificates
for each cluster member. Because the individual WildFire appliances
share a client certificate, you must configure a unique hostname
(DNS name) for each WildFire appliance. Then you can add all the
hostnames as certificate attributes to the shared certificate or
use a one-wildcard string that matches all the custom hostnames
on all the WildFire appliances in the cluster.
To configure
a single custom certificate for your WildFire cluster to use when
communicating with the Panorama™, complete the following procedure.