How to renew a locally generated certificate (self-signed certificate)

To renew a locally generated certificate (self-signed) to increase the expiry date.

• PAN-OS 8.1 and above
• Palo Alto Firewall.
• Device certificates installed.

1. Select the certificate to be renewed under GUI : Device >  Certificate Management > Certificates

2. Click on Renew and enter the new expiration Interval and Click OK.

 

3. Expiration date is now modified to reflect the change.

4. Commit the changes.

Note:  If the certificate has a SAN field populated, it will be lost when renewing the cert. Refer to When renewing a certificate the SANs will be lost.