Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

Replacing SSLVPN Certificate

DisconnectedDisconnected Newbie ✭
edited September 2020 in Mid Range Firewalls

I have a certificate that is apparently in use, but I want to change it to use a new one.

I have the new one imported and it shows in the validated column as "yes".

The current certificate shows expires in x days in the validated column.

If I click the (X) button associated with the current/active certificate, an error message appears at the bottom right side of the page "Error: Cert is being Used by: https".


To attempt to address, I went into SSL VPN, SSL VPN Server Settings & changed the drop down for Certificate Selection to the new Certificate and then clicked "accept"

>This didn't work.

>I restarted in case required. This also didn't resolve.

I then changed the LAN management to allow http traffic and logged in to manage the firewall while not using https & attempted again -again this didn't work.


What am I missing?

Category: Mid Range Firewalls
Reply

Best Answers

  • CORRECT ANSWER
    shiprasahu93shiprasahu93 Moderator
    Answer ✓

    Hello @Disconnected,

    Please check if this certificate is being used for the firewall management. You can navigate to MANAGE | Appliance | Base Settings and under the Web Management Settings section, there would be a Certificate Selection option. Make sure that it also points to the new certificate.

    Thanks!

    Shipra Sahu

    Technical Support Advisor, Premier Services

  • CORRECT ANSWER
    shiprasahu93shiprasahu93 Moderator
    Answer ✓

    Yes, I do not remember the exact threshold, but I think if there are only 30 or 15 days left for expiration it shows up there to alert you that a renewal is pending. Usually most of these certs are good for at least year so these messages do not appear if you load them with higher expiration times. I hope that helps!

    Shipra Sahu

    Technical Support Advisor, Premier Services

Answers

  • Thank you!

    You were correct. It was using the old cert.

    I set it to use the new certificate.

    Back on the certificates page, I've deleted the old one that was showing x days remaining.

    The new cert simply shows "yes" under the validated column vs. x days remaining. Why the difference between the two? Just a matter or time, or something else?


    Thank you again.

  • It does. Thanks again.

  • You're welcome. Have a good one!

    Shipra Sahu

    Technical Support Advisor, Premier Services

Sign In or Register to comment.