Prerequisites

  • A Linux or Windows client machine. The connector officially supports the following versions:

    • RHEL 8

    • Ubuntu 20.04

    • Windows 10

  • System requirements:

    • (Minimum) A single-core CPU, 1 GB RAM, 100 MB of free space

    • (Recommended) A dual-core CPU, 2 GB RAM, 1 GB of free space

  • Python 3.10 or later

    Make sure that the command python3 --version returns Python 3.10 or later. If you have multiple Python 3 versions, the python3 command might be an alias to an earlier version of Python. In this case, use python3.x (for example, python3.10) to run the connector.

  • Palo Alto Next-Generation Firewall (VM-Series or physical PA-series appliance) or Panorama, with the PAN-OS XML API enabled. Supported on PAN-OS 11.1.x and 11.2.x.

  • Palo Alto API enabled

  • An active SCM account

  • An organization created in SCM

  • Domains validated in SCM

  • REST API access enabled in SCM by your Sectigo account manager

  • Outbound network access to https://auth.sso.sectigo.com on TCP port 443

  • Outbound network access to the SCM REST API instance on TCP port 443:

    • Main SCM instance — https://enroll.enterprise.sectigo.com

    • Hard instance — https://enroll.hard.sectigo.com

    • EU instance — https://rest.eu.sectigo.com

  • SCM API credentials obtained