{"id":511,"date":"2024-02-23T15:02:55","date_gmt":"2024-02-23T15:02:55","guid":{"rendered":"https:\/\/ngeek.net\/?p=511"},"modified":"2024-03-18T17:24:48","modified_gmt":"2024-03-18T17:24:48","slug":"caducidad-del-certificado-raiz-de-pan-os","status":"publish","type":"post","link":"https:\/\/ngeek.net\/en\/2024\/02\/caducidad-del-certificado-raiz-de-pan-os\/","title":{"rendered":"PAN-OS Root Certificate Expiration"},"content":{"rendered":"

\u00bfWhat\u2019s Changing<\/strong>?<\/h3>\n\n\n\n

On December 31, 2023, the root certificate and the default certificate for Palo Alto Networks firewalls and devices running PAN-OS expired. If your certificates were not renewed before this date, your firewalls and Panorama devices will no longer be able to establish new connections to Palo Alto Networks cloud services, which may impact network traffic and potentially cause disruptions when existing connections end and attempt to reconnect.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
Certificate Type<\/td>Current Expiration Date<\/td>Expiration Date After Update<\/td><\/tr>
Root<\/td>31-dic-2023 a las 14:47:47 2023 GMT<\/td>01-ene-2032 a las 05:14:57 2032 GMT<\/td><\/tr>
Default<\/td>31-dic-2023 a las 20:14:14 2023 GMT<\/td>01-ene-2032 a las 07:30:33 2032 GMT<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n


Target Update Versions<\/strong><\/h3>\n\n\n\n

The following table contains the target update versions for Scenario 1a and Scenario 2b.<\/p>\n\n\n\n

Current PAN-OS Version<\/strong><\/td>Update to Target Version<\/strong><\/td><\/tr>
8.1<\/td>8.1.21-h28.1.25-h1 o mayor<\/td><\/tr>
9.0<\/td>9.0.16-h5 o mayor<\/td><\/tr>
9.1<\/td>9.1.11-h49.1.12-h69.1.13-h49.1.14-h79.1.16-h3 9.1.17 o superior<\/td><\/tr>
10.0<\/td>10.0.8-h1010.0.11-h310.0.12-h3 o mayor<\/td><\/tr>
10.1<\/td>10.1.3-h210.1.5-h310.1.6-h710.1.8-h610.1.9-h310.1.10 o superior<\/td><\/tr>
10.2<\/td>10.2.3-h910.2.4 o superior<\/td><\/tr>
11.0<\/td>11.0.0-h111.0.1-h211.0.2 o superior<\/td><\/tr>
11.1<\/td>11.1.0 o superior<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

All maintenance release versions have been published for Private Cloud (M-Series) Firewalls, Panorama, WF500\/B, and URL Pan-DB. For Private Cloud (M-Series) WF500\/B and URL Pan-DB devices specifically, use the following maintenance release versions:  8.1.25-h2, 9.0.16-h6, 9.1.16-h4, 10.0.12-h4, 10.1.11-h3, 10.2.7-h1, 11.0.3-h1 y 11.1.0-h1
<\/strong><\/p>\n\n\n\n

Required Action:<\/strong><\/h3>\n\n\n\n

You must complete the appropriate actions as described in one or both of the following scenarios, depending on the services you are using. Assess whether these expiring certificates affect your firewalls, Panorama devices, or connected services based on the considerations below, and take the necessary actions as applicable.
<\/p>\n\n\n\n

Scenario 1<\/h3>\n\n\n\n

If you are a customer with data redistribution<\/a> (User-ID, IP tag, user tag, GlobalProtect HIP, and\/or quarantine list), you must perform one of the following two actions: (1a) update your affected firewalls and Panorama (management modes<\/a> and log collector<\/a> Deploy Custom Certificates<\/a> on the affected firewalls and Panorama (management modes<\/a> and log collector<\/a> ).<\/a><\/a><\/a><\/a><\/a><\/a><\/p>\n\n\n\n


If you are a Private Cloud URL PAN-DB (M-Series) customer<\/a> or a Private Cloud WildFire (WF500\/B) device<\/a> , you must take the following action: (1a) update your affected firewalls, WF-500, M-Series, and Panorama (management modes<\/a> and log collector<\/a> ).
<\/p>\n\n\n\n