Replace SSL Cert without re-doing VPN config to users

Question

We have taken over a firewall with an expired SSL which they need to update. Is there a way to update the SSL with a new one, without having to reconfigure all the user VPN configs?

FormerMember · Answer

Hi James Delfino , 
 Thank you for reaching out to the Community! 
 You can upload the new certificate on the firewall, but as soon as you replace the old certificate with the new one, the remote SSL VPN user's certificate will become invalid, and they won't be able to log in to the Remote SSL VPN. 
 The Remote SSL VPN user certificate will be re-generated based on the new certificate when the user downloads the new configuration from the user portal. 
 It's not possible to replace the old certificate without re-downloading the new configuration for the users. 
 Thanks,

Replace SSL Cert without re-doing VPN config to users

Top Replies