User-ID server monitor using WinRM HTTPS fails to communicate with server - connection refused

• User-ID server monitoring using WinRM HTTPS shows "Connection refused"
• System logs shows "Server monitor <server monitor name>: connection failed, HTTP code 0, SSL peer certificate or SSH remote key was not OK'"

• PANOS >= 10.2
• WinRM over HTTPS
• Certificate RSA <= 1024 bits

• Windows Server presented a certificate that contains a key that is less than 2048 bits.
• PANOS >= 10.2 uses openssl >= 1.1.1 that requires RSA certificates with keys >= 2048 bits or ECDSA certificates with keys >= 256 bits.

• Issue a new certificate that meet the openssl requirements as shared before: RSA certificate keys greater or equal to 2048 bits or ECDSA certificate keys greater or equal to 256 bits.

See also

Changes to Default Behavior in PAN-OS 10.2

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/changes-to-default-behavior/changes-to-default-behavior-in-pan-os-10-2