Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Panos Provider
  3. API Docs
  4. CertificateProfile
panos 2.0.0 published on Tuesday, Apr 15, 2025 by paloaltonetworks
paloaltonetworks/terraform-provider-panos

panos.CertificateProfile

Explore with Pulumi AI

panos logo
panos 2.0.0 published on Tuesday, Apr 15, 2025 by paloaltonetworks
paloaltonetworks/terraform-provider-panos

    Create CertificateProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CertificateProfile(name: string, args: CertificateProfileArgs, opts?: CustomResourceOptions);
    @overload
def CertificateProfile(resource_name: str,
                       args: CertificateProfileArgs,
                       opts: Optional[ResourceOptions] = None)

@overload
def CertificateProfile(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       location: Optional[CertificateProfileLocationArgs] = None,
                       crl_receive_timeout: Optional[float] = None,
                       block_timeout_certificate: Optional[bool] = None,
                       block_unknown_certificate: Optional[bool] = None,
                       certificate_status_timeout: Optional[float] = None,
                       certificates: Optional[Sequence[CertificateProfileCertificateArgs]] = None,
                       block_expired_certificate: Optional[bool] = None,
                       domain: Optional[str] = None,
                       block_unauthenticated_certificate: Optional[bool] = None,
                       name: Optional[str] = None,
                       ocsp_exclude_nonce: Optional[bool] = None,
                       ocsp_receive_timeout: Optional[float] = None,
                       use_crl: Optional[bool] = None,
                       use_ocsp: Optional[bool] = None,
                       username_field: Optional[CertificateProfileUsernameFieldArgs] = None)
    func NewCertificateProfile(ctx *Context, name string, args CertificateProfileArgs, opts ...ResourceOption) (*CertificateProfile, error)
    public CertificateProfile(string name, CertificateProfileArgs args, CustomResourceOptions? opts = null)
    public CertificateProfile(String name, CertificateProfileArgs args)
public CertificateProfile(String name, CertificateProfileArgs args, CustomResourceOptions options)

    type: panos:CertificateProfile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args CertificateProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CertificateProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CertificateProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CertificateProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CertificateProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var certificateProfileResource = new Panos.CertificateProfile("certificateProfileResource", new()
{
    Location = new Panos.Inputs.CertificateProfileLocationArgs
    {
        Panorama = null,
        Shared = null,
        Template = new Panos.Inputs.CertificateProfileLocationTemplateArgs
        {
            Name = "string",
            PanoramaDevice = "string",
        },
        TemplateStack = new Panos.Inputs.CertificateProfileLocationTemplateStackArgs
        {
            Name = "string",
            PanoramaDevice = "string",
        },
        TemplateStackVsys = new Panos.Inputs.CertificateProfileLocationTemplateStackVsysArgs
        {
            NgfwDevice = "string",
            PanoramaDevice = "string",
            TemplateStack = "string",
            Vsys = "string",
        },
        TemplateVsys = new Panos.Inputs.CertificateProfileLocationTemplateVsysArgs
        {
            NgfwDevice = "string",
            PanoramaDevice = "string",
            Template = "string",
            Vsys = "string",
        },
    },
    CrlReceiveTimeout = 0,
    BlockTimeoutCertificate = false,
    BlockUnknownCertificate = false,
    CertificateStatusTimeout = 0,
    Certificates = new[]
    {
        new Panos.Inputs.CertificateProfileCertificateArgs
        {
            Name = "string",
            DefaultOcspUrl = "string",
            OcspVerifyCertificate = "string",
            TemplateName = "string",
        },
    },
    BlockExpiredCertificate = false,
    Domain = "string",
    BlockUnauthenticatedCertificate = false,
    Name = "string",
    OcspExcludeNonce = false,
    OcspReceiveTimeout = 0,
    UseCrl = false,
    UseOcsp = false,
    UsernameField = new Panos.Inputs.CertificateProfileUsernameFieldArgs
    {
        Subject = "string",
        SubjectAlt = "string",
    },
});

    example, err := panos.NewCertificateProfile(ctx, "certificateProfileResource", &panos.CertificateProfileArgs{
	Location: &panos.CertificateProfileLocationArgs{
		Panorama: &panos.CertificateProfileLocationPanoramaArgs{},
		Shared:   &panos.CertificateProfileLocationSharedArgs{},
		Template: &panos.CertificateProfileLocationTemplateArgs{
			Name:           pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
		},
		TemplateStack: &panos.CertificateProfileLocationTemplateStackArgs{
			Name:           pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
		},
		TemplateStackVsys: &panos.CertificateProfileLocationTemplateStackVsysArgs{
			NgfwDevice:     pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
			TemplateStack:  pulumi.String("string"),
			Vsys:           pulumi.String("string"),
		},
		TemplateVsys: &panos.CertificateProfileLocationTemplateVsysArgs{
			NgfwDevice:     pulumi.String("string"),
			PanoramaDevice: pulumi.String("string"),
			Template:       pulumi.String("string"),
			Vsys:           pulumi.String("string"),
		},
	},
	CrlReceiveTimeout:        pulumi.Float64(0),
	BlockTimeoutCertificate:  pulumi.Bool(false),
	BlockUnknownCertificate:  pulumi.Bool(false),
	CertificateStatusTimeout: pulumi.Float64(0),
	Certificates: panos.CertificateProfileCertificateArray{
		&panos.CertificateProfileCertificateArgs{
			Name:                  pulumi.String("string"),
			DefaultOcspUrl:        pulumi.String("string"),
			OcspVerifyCertificate: pulumi.String("string"),
			TemplateName:          pulumi.String("string"),
		},
	},
	BlockExpiredCertificate:         pulumi.Bool(false),
	Domain:                          pulumi.String("string"),
	BlockUnauthenticatedCertificate: pulumi.Bool(false),
	Name:                            pulumi.String("string"),
	OcspExcludeNonce:                pulumi.Bool(false),
	OcspReceiveTimeout:              pulumi.Float64(0),
	UseCrl:                          pulumi.Bool(false),
	UseOcsp:                         pulumi.Bool(false),
	UsernameField: &panos.CertificateProfileUsernameFieldArgs{
		Subject:    pulumi.String("string"),
		SubjectAlt: pulumi.String("string"),
	},
})

    var certificateProfileResource = new CertificateProfile("certificateProfileResource", CertificateProfileArgs.builder()
    .location(CertificateProfileLocationArgs.builder()
        .panorama()
        .shared()
        .template(CertificateProfileLocationTemplateArgs.builder()
            .name("string")
            .panoramaDevice("string")
            .build())
        .templateStack(CertificateProfileLocationTemplateStackArgs.builder()
            .name("string")
            .panoramaDevice("string")
            .build())
        .templateStackVsys(CertificateProfileLocationTemplateStackVsysArgs.builder()
            .ngfwDevice("string")
            .panoramaDevice("string")
            .templateStack("string")
            .vsys("string")
            .build())
        .templateVsys(CertificateProfileLocationTemplateVsysArgs.builder()
            .ngfwDevice("string")
            .panoramaDevice("string")
            .template("string")
            .vsys("string")
            .build())
        .build())
    .crlReceiveTimeout(0)
    .blockTimeoutCertificate(false)
    .blockUnknownCertificate(false)
    .certificateStatusTimeout(0)
    .certificates(CertificateProfileCertificateArgs.builder()
        .name("string")
        .defaultOcspUrl("string")
        .ocspVerifyCertificate("string")
        .templateName("string")
        .build())
    .blockExpiredCertificate(false)
    .domain("string")
    .blockUnauthenticatedCertificate(false)
    .name("string")
    .ocspExcludeNonce(false)
    .ocspReceiveTimeout(0)
    .useCrl(false)
    .useOcsp(false)
    .usernameField(CertificateProfileUsernameFieldArgs.builder()
        .subject("string")
        .subjectAlt("string")
        .build())
    .build());

    certificate_profile_resource = panos.CertificateProfile("certificateProfileResource",
    location={
        "panorama": {},
        "shared": {},
        "template": {
            "name": "string",
            "panorama_device": "string",
        },
        "template_stack": {
            "name": "string",
            "panorama_device": "string",
        },
        "template_stack_vsys": {
            "ngfw_device": "string",
            "panorama_device": "string",
            "template_stack": "string",
            "vsys": "string",
        },
        "template_vsys": {
            "ngfw_device": "string",
            "panorama_device": "string",
            "template": "string",
            "vsys": "string",
        },
    },
    crl_receive_timeout=0,
    block_timeout_certificate=False,
    block_unknown_certificate=False,
    certificate_status_timeout=0,
    certificates=[{
        "name": "string",
        "default_ocsp_url": "string",
        "ocsp_verify_certificate": "string",
        "template_name": "string",
    }],
    block_expired_certificate=False,
    domain="string",
    block_unauthenticated_certificate=False,
    name="string",
    ocsp_exclude_nonce=False,
    ocsp_receive_timeout=0,
    use_crl=False,
    use_ocsp=False,
    username_field={
        "subject": "string",
        "subject_alt": "string",
    })

    const certificateProfileResource = new panos.CertificateProfile("certificateProfileResource", {
    location: {
        panorama: {},
        shared: {},
        template: {
            name: "string",
            panoramaDevice: "string",
        },
        templateStack: {
            name: "string",
            panoramaDevice: "string",
        },
        templateStackVsys: {
            ngfwDevice: "string",
            panoramaDevice: "string",
            templateStack: "string",
            vsys: "string",
        },
        templateVsys: {
            ngfwDevice: "string",
            panoramaDevice: "string",
            template: "string",
            vsys: "string",
        },
    },
    crlReceiveTimeout: 0,
    blockTimeoutCertificate: false,
    blockUnknownCertificate: false,
    certificateStatusTimeout: 0,
    certificates: [{
        name: "string",
        defaultOcspUrl: "string",
        ocspVerifyCertificate: "string",
        templateName: "string",
    }],
    blockExpiredCertificate: false,
    domain: "string",
    blockUnauthenticatedCertificate: false,
    name: "string",
    ocspExcludeNonce: false,
    ocspReceiveTimeout: 0,
    useCrl: false,
    useOcsp: false,
    usernameField: {
        subject: "string",
        subjectAlt: "string",
    },
});

    type: panos:CertificateProfile
properties:
    blockExpiredCertificate: false
    blockTimeoutCertificate: false
    blockUnauthenticatedCertificate: false
    blockUnknownCertificate: false
    certificateStatusTimeout: 0
    certificates:
        - defaultOcspUrl: string
          name: string
          ocspVerifyCertificate: string
          templateName: string
    crlReceiveTimeout: 0
    domain: string
    location:
        panorama: {}
        shared: {}
        template:
            name: string
            panoramaDevice: string
        templateStack:
            name: string
            panoramaDevice: string
        templateStackVsys:
            ngfwDevice: string
            panoramaDevice: string
            templateStack: string
            vsys: string
        templateVsys:
            ngfwDevice: string
            panoramaDevice: string
            template: string
            vsys: string
    name: string
    ocspExcludeNonce: false
    ocspReceiveTimeout: 0
    useCrl: false
    useOcsp: false
    usernameField:
        subject: string
        subjectAlt: string

    CertificateProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CertificateProfile resource accepts the following input properties:

    Location CertificateProfileLocation
    The location of this object.
    BlockExpiredCertificate bool
    Whether to block a session if certificate status is expired.
    BlockTimeoutCertificate bool
    Whether to block a session if cert. status can't be retrieved within timeout.
    BlockUnauthenticatedCertificate bool
    Whether to block session if the certificate was not issued to the authenticating device.
    BlockUnknownCertificate bool
    Whether to block a session if cert. status is unknown.
    CertificateStatusTimeout double
    Certificate status query timeout value in seconds.
    Certificates List<CertificateProfileCertificate>
    CA Certificate to assign to the profile.
    CrlReceiveTimeout double
    CRL receive timeout value in seconds.
    Domain string
    NetBIOS domain so the PAN-OS software can map users through User-ID.
    Name string
    OcspExcludeNonce bool
    Whether to exclude nonce extension for OCSP requests.
    OcspReceiveTimeout double
    OCSP receive timeout value in seconds.
    UseCrl bool
    Enable use of CRL to verify the revocation status of certificates.
    UseOcsp bool
    Enable use of OCSP to verify the revocation status of certificates.
    UsernameField CertificateProfileUsernameField
    Location CertificateProfileLocationArgs
    The location of this object.
    BlockExpiredCertificate bool
    Whether to block a session if certificate status is expired.
    BlockTimeoutCertificate bool
    Whether to block a session if cert. status can't be retrieved within timeout.
    BlockUnauthenticatedCertificate bool
    Whether to block session if the certificate was not issued to the authenticating device.
    BlockUnknownCertificate bool
    Whether to block a session if cert. status is unknown.
    CertificateStatusTimeout float64
    Certificate status query timeout value in seconds.
    Certificates []CertificateProfileCertificateArgs
    CA Certificate to assign to the profile.
    CrlReceiveTimeout float64
    CRL receive timeout value in seconds.
    Domain string
    NetBIOS domain so the PAN-OS software can map users through User-ID.
    Name string
    OcspExcludeNonce bool
    Whether to exclude nonce extension for OCSP requests.
    OcspReceiveTimeout float64
    OCSP receive timeout value in seconds.
    UseCrl bool
    Enable use of CRL to verify the revocation status of certificates.
    UseOcsp bool
    Enable use of OCSP to verify the revocation status of certificates.
    UsernameField CertificateProfileUsernameFieldArgs
    location CertificateProfileLocation
    The location of this object.
    blockExpiredCertificate Boolean
    Whether to block a session if certificate status is expired.
    blockTimeoutCertificate Boolean
    Whether to block a session if cert. status can't be retrieved within timeout.
    blockUnauthenticatedCertificate Boolean
    Whether to block session if the certificate was not issued to the authenticating device.
    blockUnknownCertificate Boolean
    Whether to block a session if cert. status is unknown.
    certificateStatusTimeout Double
    Certificate status query timeout value in seconds.
    certificates List<CertificateProfileCertificate>
    CA Certificate to assign to the profile.
    crlReceiveTimeout Double
    CRL receive timeout value in seconds.
    domain String
    NetBIOS domain so the PAN-OS software can map users through User-ID.
    name String
    ocspExcludeNonce Boolean
    Whether to exclude nonce extension for OCSP requests.
    ocspReceiveTimeout Double
    OCSP receive timeout value in seconds.
    useCrl Boolean
    Enable use of CRL to verify the revocation status of certificates.
    useOcsp Boolean
    Enable use of OCSP to verify the revocation status of certificates.
    usernameField CertificateProfileUsernameField
    location CertificateProfileLocation
    The location of this object.
    blockExpiredCertificate boolean
    Whether to block a session if certificate status is expired.
    blockTimeoutCertificate boolean
    Whether to block a session if cert. status can't be retrieved within timeout.
    blockUnauthenticatedCertificate boolean
    Whether to block session if the certificate was not issued to the authenticating device.
    blockUnknownCertificate boolean
    Whether to block a session if cert. status is unknown.
    certificateStatusTimeout number
    Certificate status query timeout value in seconds.
    certificates CertificateProfileCertificate[]
    CA Certificate to assign to the profile.
    crlReceiveTimeout number
    CRL receive timeout value in seconds.
    domain string
    NetBIOS domain so the PAN-OS software can map users through User-ID.
    name string
    ocspExcludeNonce boolean
    Whether to exclude nonce extension for OCSP requests.
    ocspReceiveTimeout number
    OCSP receive timeout value in seconds.
    useCrl boolean
    Enable use of CRL to verify the revocation status of certificates.
    useOcsp boolean
    Enable use of OCSP to verify the revocation status of certificates.
    usernameField CertificateProfileUsernameField
    location CertificateProfileLocationArgs
    The location of this object.
    block_expired_certificate bool
    Whether to block a session if certificate status is expired.
    block_timeout_certificate bool
    Whether to block a session if cert. status can't be retrieved within timeout.
    block_unauthenticated_certificate bool
    Whether to block session if the certificate was not issued to the authenticating device.
    block_unknown_certificate bool
    Whether to block a session if cert. status is unknown.
    certificate_status_timeout float
    Certificate status query timeout value in seconds.
    certificates Sequence[CertificateProfileCertificateArgs]
    CA Certificate to assign to the profile.
    crl_receive_timeout float
    CRL receive timeout value in seconds.
    domain str
    NetBIOS domain so the PAN-OS software can map users through User-ID.
    name str
    ocsp_exclude_nonce bool
    Whether to exclude nonce extension for OCSP requests.
    ocsp_receive_timeout float
    OCSP receive timeout value in seconds.
    use_crl bool
    Enable use of CRL to verify the revocation status of certificates.
    use_ocsp bool
    Enable use of OCSP to verify the revocation status of certificates.
    username_field CertificateProfileUsernameFieldArgs
    location Property Map
    The location of this object.
    blockExpiredCertificate Boolean
    Whether to block a session if certificate status is expired.
    blockTimeoutCertificate Boolean
    Whether to block a session if cert. status can't be retrieved within timeout.
    blockUnauthenticatedCertificate Boolean
    Whether to block session if the certificate was not issued to the authenticating device.
    blockUnknownCertificate Boolean
    Whether to block a session if cert. status is unknown.
    certificateStatusTimeout Number
    Certificate status query timeout value in seconds.
    certificates List<Property Map>
    CA Certificate to assign to the profile.
    crlReceiveTimeout Number
    CRL receive timeout value in seconds.
    domain String
    NetBIOS domain so the PAN-OS software can map users through User-ID.
    name String
    ocspExcludeNonce Boolean
    Whether to exclude nonce extension for OCSP requests.
    ocspReceiveTimeout Number
    OCSP receive timeout value in seconds.
    useCrl Boolean
    Enable use of CRL to verify the revocation status of certificates.
    useOcsp Boolean
    Enable use of OCSP to verify the revocation status of certificates.
    usernameField Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CertificateProfile resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing CertificateProfile Resource

    Get an existing CertificateProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CertificateProfileState, opts?: CustomResourceOptions): CertificateProfile
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        block_expired_certificate: Optional[bool] = None,
        block_timeout_certificate: Optional[bool] = None,
        block_unauthenticated_certificate: Optional[bool] = None,
        block_unknown_certificate: Optional[bool] = None,
        certificate_status_timeout: Optional[float] = None,
        certificates: Optional[Sequence[CertificateProfileCertificateArgs]] = None,
        crl_receive_timeout: Optional[float] = None,
        domain: Optional[str] = None,
        location: Optional[CertificateProfileLocationArgs] = None,
        name: Optional[str] = None,
        ocsp_exclude_nonce: Optional[bool] = None,
        ocsp_receive_timeout: Optional[float] = None,
        use_crl: Optional[bool] = None,
        use_ocsp: Optional[bool] = None,
        username_field: Optional[CertificateProfileUsernameFieldArgs] = None) -> CertificateProfile
    func GetCertificateProfile(ctx *Context, name string, id IDInput, state *CertificateProfileState, opts ...ResourceOption) (*CertificateProfile, error)
    public static CertificateProfile Get(string name, Input<string> id, CertificateProfileState? state, CustomResourceOptions? opts = null)
    public static CertificateProfile get(String name, Output<String> id, CertificateProfileState state, CustomResourceOptions options)
    resources:  _:    type: panos:CertificateProfile    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    BlockExpiredCertificate bool
    Whether to block a session if certificate status is expired.
    BlockTimeoutCertificate bool
    Whether to block a session if cert. status can't be retrieved within timeout.
    BlockUnauthenticatedCertificate bool
    Whether to block session if the certificate was not issued to the authenticating device.
    BlockUnknownCertificate bool
    Whether to block a session if cert. status is unknown.
    CertificateStatusTimeout double
    Certificate status query timeout value in seconds.
    Certificates List<CertificateProfileCertificate>
    CA Certificate to assign to the profile.
    CrlReceiveTimeout double
    CRL receive timeout value in seconds.
    Domain string
    NetBIOS domain so the PAN-OS software can map users through User-ID.
    Location CertificateProfileLocation
    The location of this object.
    Name string
    OcspExcludeNonce bool
    Whether to exclude nonce extension for OCSP requests.
    OcspReceiveTimeout double
    OCSP receive timeout value in seconds.
    UseCrl bool
    Enable use of CRL to verify the revocation status of certificates.
    UseOcsp bool
    Enable use of OCSP to verify the revocation status of certificates.
    UsernameField CertificateProfileUsernameField
    BlockExpiredCertificate bool
    Whether to block a session if certificate status is expired.
    BlockTimeoutCertificate bool
    Whether to block a session if cert. status can't be retrieved within timeout.
    BlockUnauthenticatedCertificate bool
    Whether to block session if the certificate was not issued to the authenticating device.
    BlockUnknownCertificate bool
    Whether to block a session if cert. status is unknown.
    CertificateStatusTimeout float64
    Certificate status query timeout value in seconds.
    Certificates []CertificateProfileCertificateArgs
    CA Certificate to assign to the profile.
    CrlReceiveTimeout float64
    CRL receive timeout value in seconds.
    Domain string
    NetBIOS domain so the PAN-OS software can map users through User-ID.
    Location CertificateProfileLocationArgs
    The location of this object.
    Name string
    OcspExcludeNonce bool
    Whether to exclude nonce extension for OCSP requests.
    OcspReceiveTimeout float64
    OCSP receive timeout value in seconds.
    UseCrl bool
    Enable use of CRL to verify the revocation status of certificates.
    UseOcsp bool
    Enable use of OCSP to verify the revocation status of certificates.
    UsernameField CertificateProfileUsernameFieldArgs
    blockExpiredCertificate Boolean
    Whether to block a session if certificate status is expired.
    blockTimeoutCertificate Boolean
    Whether to block a session if cert. status can't be retrieved within timeout.
    blockUnauthenticatedCertificate Boolean
    Whether to block session if the certificate was not issued to the authenticating device.
    blockUnknownCertificate Boolean
    Whether to block a session if cert. status is unknown.
    certificateStatusTimeout Double
    Certificate status query timeout value in seconds.
    certificates List<CertificateProfileCertificate>
    CA Certificate to assign to the profile.
    crlReceiveTimeout Double
    CRL receive timeout value in seconds.
    domain String
    NetBIOS domain so the PAN-OS software can map users through User-ID.
    location CertificateProfileLocation
    The location of this object.
    name String
    ocspExcludeNonce Boolean
    Whether to exclude nonce extension for OCSP requests.
    ocspReceiveTimeout Double
    OCSP receive timeout value in seconds.
    useCrl Boolean
    Enable use of CRL to verify the revocation status of certificates.
    useOcsp Boolean
    Enable use of OCSP to verify the revocation status of certificates.
    usernameField CertificateProfileUsernameField
    blockExpiredCertificate boolean
    Whether to block a session if certificate status is expired.
    blockTimeoutCertificate boolean
    Whether to block a session if cert. status can't be retrieved within timeout.
    blockUnauthenticatedCertificate boolean
    Whether to block session if the certificate was not issued to the authenticating device.
    blockUnknownCertificate boolean
    Whether to block a session if cert. status is unknown.
    certificateStatusTimeout number
    Certificate status query timeout value in seconds.
    certificates CertificateProfileCertificate[]
    CA Certificate to assign to the profile.
    crlReceiveTimeout number
    CRL receive timeout value in seconds.
    domain string
    NetBIOS domain so the PAN-OS software can map users through User-ID.
    location CertificateProfileLocation
    The location of this object.
    name string
    ocspExcludeNonce boolean
    Whether to exclude nonce extension for OCSP requests.
    ocspReceiveTimeout number
    OCSP receive timeout value in seconds.
    useCrl boolean
    Enable use of CRL to verify the revocation status of certificates.
    useOcsp boolean
    Enable use of OCSP to verify the revocation status of certificates.
    usernameField CertificateProfileUsernameField
    block_expired_certificate bool
    Whether to block a session if certificate status is expired.
    block_timeout_certificate bool
    Whether to block a session if cert. status can't be retrieved within timeout.
    block_unauthenticated_certificate bool
    Whether to block session if the certificate was not issued to the authenticating device.
    block_unknown_certificate bool
    Whether to block a session if cert. status is unknown.
    certificate_status_timeout float
    Certificate status query timeout value in seconds.
    certificates Sequence[CertificateProfileCertificateArgs]
    CA Certificate to assign to the profile.
    crl_receive_timeout float
    CRL receive timeout value in seconds.
    domain str
    NetBIOS domain so the PAN-OS software can map users through User-ID.
    location CertificateProfileLocationArgs
    The location of this object.
    name str
    ocsp_exclude_nonce bool
    Whether to exclude nonce extension for OCSP requests.
    ocsp_receive_timeout float
    OCSP receive timeout value in seconds.
    use_crl bool
    Enable use of CRL to verify the revocation status of certificates.
    use_ocsp bool
    Enable use of OCSP to verify the revocation status of certificates.
    username_field CertificateProfileUsernameFieldArgs
    blockExpiredCertificate Boolean
    Whether to block a session if certificate status is expired.
    blockTimeoutCertificate Boolean
    Whether to block a session if cert. status can't be retrieved within timeout.
    blockUnauthenticatedCertificate Boolean
    Whether to block session if the certificate was not issued to the authenticating device.
    blockUnknownCertificate Boolean
    Whether to block a session if cert. status is unknown.
    certificateStatusTimeout Number
    Certificate status query timeout value in seconds.
    certificates List<Property Map>
    CA Certificate to assign to the profile.
    crlReceiveTimeout Number
    CRL receive timeout value in seconds.
    domain String
    NetBIOS domain so the PAN-OS software can map users through User-ID.
    location Property Map
    The location of this object.
    name String
    ocspExcludeNonce Boolean
    Whether to exclude nonce extension for OCSP requests.
    ocspReceiveTimeout Number
    OCSP receive timeout value in seconds.
    useCrl Boolean
    Enable use of CRL to verify the revocation status of certificates.
    useOcsp Boolean
    Enable use of OCSP to verify the revocation status of certificates.
    usernameField Property Map

    Supporting Types

    CertificateProfileCertificate, CertificateProfileCertificateArgs

    Name string
    DefaultOcspUrl string
    Default URL for ocsp verification.
    OcspVerifyCertificate string
    Certificate to verify signature in OCSP response.
    TemplateName string
    Certificate Template Name / OID for the certificate
    Name string
    DefaultOcspUrl string
    Default URL for ocsp verification.
    OcspVerifyCertificate string
    Certificate to verify signature in OCSP response.
    TemplateName string
    Certificate Template Name / OID for the certificate
    name String
    defaultOcspUrl String
    Default URL for ocsp verification.
    ocspVerifyCertificate String
    Certificate to verify signature in OCSP response.
    templateName String
    Certificate Template Name / OID for the certificate
    name string
    defaultOcspUrl string
    Default URL for ocsp verification.
    ocspVerifyCertificate string
    Certificate to verify signature in OCSP response.
    templateName string
    Certificate Template Name / OID for the certificate
    name str
    default_ocsp_url str
    Default URL for ocsp verification.
    ocsp_verify_certificate str
    Certificate to verify signature in OCSP response.
    template_name str
    Certificate Template Name / OID for the certificate
    name String
    defaultOcspUrl String
    Default URL for ocsp verification.
    ocspVerifyCertificate String
    Certificate to verify signature in OCSP response.
    templateName String
    Certificate Template Name / OID for the certificate

    CertificateProfileLocation, CertificateProfileLocationArgs

    Panorama CertificateProfileLocationPanorama
    Located in a panorama.
    Shared CertificateProfileLocationShared
    Located in shared.
    Template CertificateProfileLocationTemplate
    Located in a specific template.
    TemplateStack CertificateProfileLocationTemplateStack
    Located in a specific template stack.
    TemplateStackVsys CertificateProfileLocationTemplateStackVsys
    Located in a specific template stack, device and vsys.
    TemplateVsys CertificateProfileLocationTemplateVsys
    Located in a specific template, device and vsys.
    Panorama CertificateProfileLocationPanorama
    Located in a panorama.
    Shared CertificateProfileLocationShared
    Located in shared.
    Template CertificateProfileLocationTemplate
    Located in a specific template.
    TemplateStack CertificateProfileLocationTemplateStack
    Located in a specific template stack.
    TemplateStackVsys CertificateProfileLocationTemplateStackVsys
    Located in a specific template stack, device and vsys.
    TemplateVsys CertificateProfileLocationTemplateVsys
    Located in a specific template, device and vsys.
    panorama CertificateProfileLocationPanorama
    Located in a panorama.
    shared CertificateProfileLocationShared
    Located in shared.
    template CertificateProfileLocationTemplate
    Located in a specific template.
    templateStack CertificateProfileLocationTemplateStack
    Located in a specific template stack.
    templateStackVsys CertificateProfileLocationTemplateStackVsys
    Located in a specific template stack, device and vsys.
    templateVsys CertificateProfileLocationTemplateVsys
    Located in a specific template, device and vsys.
    panorama CertificateProfileLocationPanorama
    Located in a panorama.
    shared CertificateProfileLocationShared
    Located in shared.
    template CertificateProfileLocationTemplate
    Located in a specific template.
    templateStack CertificateProfileLocationTemplateStack
    Located in a specific template stack.
    templateStackVsys CertificateProfileLocationTemplateStackVsys
    Located in a specific template stack, device and vsys.
    templateVsys CertificateProfileLocationTemplateVsys
    Located in a specific template, device and vsys.
    panorama CertificateProfileLocationPanorama
    Located in a panorama.
    shared CertificateProfileLocationShared
    Located in shared.
    template CertificateProfileLocationTemplate
    Located in a specific template.
    template_stack CertificateProfileLocationTemplateStack
    Located in a specific template stack.
    template_stack_vsys CertificateProfileLocationTemplateStackVsys
    Located in a specific template stack, device and vsys.
    template_vsys CertificateProfileLocationTemplateVsys
    Located in a specific template, device and vsys.
    panorama Property Map
    Located in a panorama.
    shared Property Map
    Located in shared.
    template Property Map
    Located in a specific template.
    templateStack Property Map
    Located in a specific template stack.
    templateStackVsys Property Map
    Located in a specific template stack, device and vsys.
    templateVsys Property Map
    Located in a specific template, device and vsys.

    CertificateProfileLocationTemplate, CertificateProfileLocationTemplateArgs

    Name string
    The template.
    PanoramaDevice string
    The panorama device.
    Name string
    The template.
    PanoramaDevice string
    The panorama device.
    name String
    The template.
    panoramaDevice String
    The panorama device.
    name string
    The template.
    panoramaDevice string
    The panorama device.
    name str
    The template.
    panorama_device str
    The panorama device.
    name String
    The template.
    panoramaDevice String
    The panorama device.

    CertificateProfileLocationTemplateStack, CertificateProfileLocationTemplateStackArgs

    Name string
    The template stack.
    PanoramaDevice string
    The panorama device.
    Name string
    The template stack.
    PanoramaDevice string
    The panorama device.
    name String
    The template stack.
    panoramaDevice String
    The panorama device.
    name string
    The template stack.
    panoramaDevice string
    The panorama device.
    name str
    The template stack.
    panorama_device str
    The panorama device.
    name String
    The template stack.
    panoramaDevice String
    The panorama device.

    CertificateProfileLocationTemplateStackVsys, CertificateProfileLocationTemplateStackVsysArgs

    NgfwDevice string
    The NGFW device.
    PanoramaDevice string
    The panorama device.
    TemplateStack string
    The template stack.
    Vsys string
    The vsys.
    NgfwDevice string
    The NGFW device.
    PanoramaDevice string
    The panorama device.
    TemplateStack string
    The template stack.
    Vsys string
    The vsys.
    ngfwDevice String
    The NGFW device.
    panoramaDevice String
    The panorama device.
    templateStack String
    The template stack.
    vsys String
    The vsys.
    ngfwDevice string
    The NGFW device.
    panoramaDevice string
    The panorama device.
    templateStack string
    The template stack.
    vsys string
    The vsys.
    ngfw_device str
    The NGFW device.
    panorama_device str
    The panorama device.
    template_stack str
    The template stack.
    vsys str
    The vsys.
    ngfwDevice String
    The NGFW device.
    panoramaDevice String
    The panorama device.
    templateStack String
    The template stack.
    vsys String
    The vsys.

    CertificateProfileLocationTemplateVsys, CertificateProfileLocationTemplateVsysArgs

    NgfwDevice string
    The NGFW device.
    PanoramaDevice string
    The panorama device.
    Template string
    The template.
    Vsys string
    The vsys.
    NgfwDevice string
    The NGFW device.
    PanoramaDevice string
    The panorama device.
    Template string
    The template.
    Vsys string
    The vsys.
    ngfwDevice String
    The NGFW device.
    panoramaDevice String
    The panorama device.
    template String
    The template.
    vsys String
    The vsys.
    ngfwDevice string
    The NGFW device.
    panoramaDevice string
    The panorama device.
    template string
    The template.
    vsys string
    The vsys.
    ngfw_device str
    The NGFW device.
    panorama_device str
    The panorama device.
    template str
    The template.
    vsys str
    The vsys.
    ngfwDevice String
    The NGFW device.
    panoramaDevice String
    The panorama device.
    template String
    The template.
    vsys String
    The vsys.

    CertificateProfileUsernameField, CertificateProfileUsernameFieldArgs

    Subject string
    The common name.
    SubjectAlt string
    The Email or Principal Name.
    Subject string
    The common name.
    SubjectAlt string
    The Email or Principal Name.
    subject String
    The common name.
    subjectAlt String
    The Email or Principal Name.
    subject string
    The common name.
    subjectAlt string
    The Email or Principal Name.
    subject str
    The common name.
    subject_alt str
    The Email or Principal Name.
    subject String
    The common name.
    subjectAlt String
    The Email or Principal Name.

    Package Details

    Repository
    panos paloaltonetworks/terraform-provider-panos
    License
    Notes
    This Pulumi package is based on the panos Terraform Provider.
    panos logo
    panos 2.0.0 published on Tuesday, Apr 15, 2025 by paloaltonetworks
    paloaltonetworks/terraform-provider-panos