Howdy,
Any time I try doing anything with certificates on an XG it always seems to be much harder than it needs to be.
I've just installed a certificate to replace a nearly expired one, once I worked out that you can't add the intermediate CA certificates after the fact and expect the newly imported certificate to be verified against it.
I've updated the Admin Console certificate entry, the SMTP TLS certificate entry and the SSL VPN server certificate entry and I've even restart the XG Firewall. However when I go to remove the old certificate I get the following error - "Certificate could not be deleted. Certificate is already used in IPsec, L2TP or SSL VPN connection".
XG firewall is running 17.5.3, I'm not actually using any VPN capability and the Admin Console + SMTP MTA are correctly using the new certificate.
Anyone got any idea why the XG still thinks the old certificate is in use somewhere? Would be really nice to see what services are bound to a certificate so you can quickly go to the appropriate spot to modify the configuration.
This thread was automatically locked due to age.
