StudyToCert

All certifications / NGFW Engineer / Lessons

Palo Alto Networks Certified Next-Generation Firewall Engineer NGFW-Engineer · Domain 2: PAN-OS device setting configuration

Certificate management: CAs, forward trust/untrust, SSL inbound inspection, SSL/TLS service profiles, certificate profiles, OCSP/CRL

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

Certificates underpin decryption, GlobalProtect, the management interface and many authentication features. You manage them under Device > Certificate Management > Certificates, where you can generate, import and export certificates and keys, or create certificate signing requests (CSRs) for an enterprise certificate authority (CA) to sign. A CA is the entity that signs certificates and vouches for their identity; whether an endpoint trusts a certificate depends on whether it trusts the CA that signed it.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study NGFW Engineer for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the NGFW Engineer study plan