When you set the Master Key for the first time, you can leave the "Current Master Key" field blank or enter a new key and give a time period for validity. Any future changes to the Master Key will require you to enter the current Master Key.
owner: panagent
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClvCCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail