API calls for exporting and importing certificates in a specific template on Panorama

• API calls for automating import, export and renewal of certificates on Panorama
• The certificates can be in specific templates for Firewalls managed by Panorama

• Panorama managed Firewalls
• Supported PAN-OS
• API
• Certificates in template

• The procedure tested is given below.
• We request you to test this procedure in a lab environment before using it in production, since the names of the virtual systems and templates, as well as the certificate name, can vary.

1. Set the target vsys :- 
   1. https://10.XX.XX.XX/api?type=op&cmd=<set><system><setting><target><template><name>TPL1</name><vsys>vsys1</vsys></template></target></setting></system></set>&key=
   2. TPL1 is the name of the template
   3. vsys1 is the name of the vsys
2. Generate a CSR :-
   1. https://10.XX.XX.XX/api?type=op&cmd=<request><certificate><generate><certificate-name>apicert</certificate-name><name>testing</name><algorithm><RSA><rsa-nbits>2048</rsa-nbits></RSA></algorithm><digest>sha256</digest><signed-by>external</signed-by><ca>no</ca></generate></certificate></request>&key=
   2. apicert is the name of the certificate
   3. testing is the CN
3. Export the CSR :-
   1. https://10.XX.XX.XX/api?type=export&category=certificate&certificate-name=apicert&format=pkcs10&include-key=no&key=
4. Import the signed certificate :-
   1. %curl -F file=@./cert_test123.crt 'https://10.XX.XX.XX/api?type=import&category=certificate&certificate-name=apicert.crt&format=pem&key=' -k
   2. file=@<path of the cert file>

Getting started with XML API