Certificate Renewal fails with the error "Failed to determine the issuer of certificate"
12068
Created On 04/27/22 03:51 AM - Last Modified 04/28/22 02:25 AM
Symptom
When a user tries to renew a certificate under the following path, It fails with an error
Device -----> Certificate -----> Renew
Error observed
Environment
PAN-OS 9.1 or later
Cause
If the certificate is generated by a third party entity and not the firewall it fails to be renewed, It has to be renewed by the same authority which initially generated the certificate.
Resolution
Please make sure that we can only renew a certificate which has been generated locally on the firewall.
Renew a Certificate - https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/pan-os/9-1/pan-os-admin/pan-os-admin.pdf