Commit error: Non-RSA certificate <certificate name> is not supported to encrypt/decrypt cookie
1111
Created On 07/15/22 14:16 PM - Last Modified 04/08/26 10:08 AM
Symptom
Commit fails with error message below.
Details:Non-RSA certificate <certificate name> is not supported to encrypt/decrypt cookie
(Module: gp_broker)
client gp_broker phase 1 failure
Commit failedEnvironment
- Next-Gen Firewalls
- Supported PAN-OS
- GlobalProtect
- Cookie Authentication
Cause
Using Non-RSA certificate to encrypt and decrypt the cookie for user authentication.
Resolution
- To encrypt and decrypt the cookies, use RSA certificate.
- The portal and gateways use the RSA encrypt padding scheme PKCS#1 V1.5 to generate the cookie (using the public key of the certificate) and decrypt the cookie (using the private key of the certificate).