Install CA Certificate on PA

Step 1 : Generate Certificate through CSR [Certificate Signing Request].

Click : Request a Certificate

Open CSR file in notepad & Copy Paste in CA so it would generate Certificate based on CSR.

Step 2 : Download Root CA Certificate

Step 3 : Generate & Download identity certificate from CA

Base 64 & PEM format

Step 4 : Upload both Root & Identity Certificate to PA

Note : Name of CSR generate & identity certificate must have same name.

Change Authentication Profile

Change Type to LDAP & login attribute sAMAccountName

CREATE A VPN ZONE AND TUNNEL INTERFACE.

No need to assign ip to tunnel interface. Assign user identification.