@Hyperion said in Using certificate on 2 Firewalls?:
how do I get/obtain a certificate for a firewall example pfSense to install on the hardware?
A 'certificate ' for what usage ?
You can make your own. If you trust the certificate you just created yourself, and you install it into the browser and other app that use these certificate(s), you'll be fine.
If you want a certificate that everybody and everyone trusts out of the box, you need to have a domain name, one you've paid for, like "123456-just-for-me.com".
@Hyperion said in Using certificate on 2 Firewalls?:
can I install an existing certificate on a 2nd firewall and use the 2nd firewall as a replacement if the 1st firewall has a hardware defect?
[image: 1708005278652-44a583c8-2ac1-40e9-9f22-ab84a32ac49e-image.png]
The third certificate : I 'own' (rent !) the domain name (example) "my-local-network-net" and I use the pfSense package acme to handle the (re)newal of the certificate.
When done, every 60 days or so, I export them to my NAS, printers and other APs : everybody that has a GUI port 433 (https) access.
@Hyperion said in Using certificate on 2 Firewalls?:
can I install an existing certificate on a 2nd firewall and use the 2nd firewall as a replacement if the 1st firewall has a hardware defect?
of course.
You can even automate this setup : if one fails, the other one takes over you doing nothing but drinking beer.
See the pfSense documentation, or one of the many video's about the subject.
@Hyperion said in Using certificate on 2 Firewalls?:
if I export an complete existing pfSense Firewall setting, will this export contain the certificate as well?
All pfSense settings are in the file you export.
Example : the hard disk of your firewall does what they all do : it dies.
No problem : you have your daily backup of the config, so :
Put a new drive in place.
Get the latest copy of pfSense : = download or contact pfSense tech support - TAC.
Put the firmware on an USB key - see pfSense Documentation "How to use Etcher to create a USB boot drive for pfSense).
Install pfSense.
As soon as the GUI is up, import your config.
Reboot.
Done.
The most difficult step was probably :
Put a new drive in place.
Btw : VMs are even more easier ...
@Hyperion said in Using certificate on 2 Firewalls?:
given by ChatGPT:
A forum member ?
Must be anew one then.
Normally, the old answer is used : RTFM ^^
As very soon you will have hundreds (more probably) questions. (and that's a good sign !)
And you really don't want to type them all.
An nobody here likes to copy past the same answers here
edit : pfSense Documentation
and also : the Youtube Netgate Channel.
edit : Don't be bothered with the RTF.. word : if you have a question : post.
We have all several things in common : born without knowing what a firewall is.
"Fire" and "wall" came in early (for me) but the two combined, buried in a small box with a lot of cables, that one needs to be learned the old fashioned way, mostly by trial and error (for me, that is) ;)
