PAN-OS Root and Default Certificate Expiration on December 31, 2023
157603
Created On 11/10/23 21:25 PM - Last Modified 11/16/23 00:12 AM
Symptom
- PAN-OS Root and Default Certificate are on expiring on December 31, 2023
- The root certificate and default certificate must be renewed before December 31, 2023
- If the certificates are not renewed before December 31, 2023, firewalls and Panorama will lose connectivity to Palo Alto Networks’ cloud services and impact network traffic, potentially causing an outage of the affected services.
Environment
- Palo Alto Networks Firewalls
- Panorama (Management and Log Collector modes)
- Data redistribution (User-ID, IP-tag, User-tag, GlobalProtect HIP, and/or quarantine list)
- URL PAN-DB private cloud (M-Series)
- URL/Advanced URL Filtering
- WildFire private cloud appliance (WF500/B)
- WildFire/Advanced WildFire Public Cloud
- DNS Security
- ThreatVault
- AutoFocus
Cause
PAN-OS Root and Default Certificate Expire on December 31, 2023.
Resolution
Refer to the following customer advisory for required actions:
Emergency Update Required - PAN-OS Root and Default Certificate Expiration