I can't delete a certificate because of "references from the ssl-tls-service-profile",
but it's a profile that I don't see in the WebUI.
Lookign in an XML editor, I see the profile is located in the vsys1 config (see below).
But, the firewall is not a multi-vsys firewall and it's never even been managed by Panorama.
I could not come up with a CLI command to reference vsys1, to delete the object.
Is there a CLI command I can use, or is editing the XML file the only way to delete this object?
Thanks.
The ssl-tls-service profile does not show in the WebUI. (This profile is a different one).
How did this item ever get stored under vsys1 and how do I delete it easily?
Vsys1 is the default vsys for all platforms. What you're describing is actually normal behavior. It looks like this cert is referenced under the "device > setup > management >general settings" as the default tls cert profile for your gui