topic Expedition can not access Panorama 11.1.x in Expedition Discussions

Expedition can not access Panorama 11.1.x

pechsteinma — Fri, 02 Aug 2024 06:37:54 GMT

Hello together,

we have our Panorama already on 11.1.3-h1 and Expedition can not download its config. The problem seems to be the new format of the API key. It doesn't matter if I create a key manually and paste it into Expedtion or input username/password to Expedition and let it create an API key.

Kind regards

Martin

Re: Expedition can not access Panorama 11.1.x

dpuigdomenec — Fri, 02 Aug 2024 07:15:31 GMT

Hi @pechsteinma (Martin)

Thanks for pointing this out.

Let us check it and work on a fix, meanwhile to import the Panorama configuration into expedition you can use the manual config upload to load the running or candidate configuration. And when exporting the resulting configuration from Expedition you can use the XMLs or set commands to push your changes.

Best regards,

David

Re: Expedition can not access Panorama 11.1.x

Eric_B — Thu, 20 Nov 2025 14:56:06 GMT

I fixed this. You can manually load and export import, but that is annoying. The issue is the char limit needs fixing with the new keys.

Hopefully you can get on you expedtion CLI. I SSHed as root:paloalto

root@expedition:~# mysql -uroot -ppaloalto pandbRBAC

MariaDB [pandbRBAC]> ALTER TABLE device_keys MODIFY COLUMN api_key VARCHAR(600);

MariaDB [pandbRBAC]> UPDATE device_keys SET api_key = 'new long key format' WHERE api_key = 'old key';

I bet you can use a user now and it will work without replacing keys, but I know this works.