Certificate Renewal for Autonomous Digital Experience Management
You must renew your GlobalProtect log collection certificate before it
expires.
Where Can I Use
This?
What Do I Need?
Prisma Access (Managed by Strata Cloud Manager)
Prisma Access (Managed by Panorama)
Strata Cloud Manager
Prisma Access license
Autonomous DEM license
The GlobalProtect log collection certificate is required in order for the endpoint to
communicate with the ADEM portal. So, when the certificate expires, communication to
the portal from the endpoint is lost. This results in data loss, since the metrics
collected on the endpoint does not reach the portal, hence does not show up on the
portal.
Be sure to renew your GlobalProtect log collection certificate before it expires.
Follow these steps to renew the certificate:
Panorama
Administrators have to manually update the certificate by performing these
steps:
Click the Panorama tab.
Click Cloud ServicesConfiguration in the left panel.
Under GlobalProtect App Log Collection and Autonomous DEM section, click Renew
Certificate for GlobalProtect App Log Collection and Autonomous DEM to renew the certificate.
Strata Cloud Manager
In the Strata Cloud Manager,
Go to ManageCertificate ManagementCertificates tab.
Under Palo Alto Network Issued certificates section,
select GP Log Certificate and click
Renew to renew the certificate.