Can you specify multiple OID for client certificate selection based authentication?

Can you specify multiple OID for client certificate selection based authentication?

949
Created On 02/06/24 15:03 PM - Last Modified 05/23/25 20:15 PM


Question


Can you specify multiple OIDs for client certificate authentication?



Environment


  • Palo Alto Firewalls
  • Supported PAN-OS
  • GlobalProtect App
  • Client Certificate Authentication


Answer


Although multiple OIDs can be specified using a comma separator, the client will only consider the first OID and ignore the rest of the OIDs.



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000Xhk1CAC&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail