https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-client-certificate-authentication-issues/m-p/578293#M5017 <P>Hello&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/157548">@ePlus_MSC</a>&nbsp;</P> <P>The logs match to below KB, please have a look:</P> <P><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClolCAC" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClolCAC</A></P> <P>&nbsp;</P> Mon, 26 Feb 2024 05:44:16 GMT akuzhuppilly 2024-02-26T05:44:16Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-client-certificate-authentication-issues/m-p/578286#M5016 <P>The Authentication keeps failing with the following:</P> <P>&nbsp;</P> <P>P5836-T8200)Debug(8265): 02/23/24 10:50:48:959 REGION-PRIO, region code is US<BR />(P5836-T8200)Debug(15492): 02/23/24 10:50:48:960 REGION-PRIO, save region code US<BR />(P5836-T8200)Debug(8551): 02/23/24 10:50:48:960 prelogin status is Error<BR />(P5836-T8200)Error(8554): 02/23/24 10:50:48:960 pre-login error message: Valid client certificate is required<BR />(P5836-T8200)Debug(9457): 02/23/24 10:50:48:960 Non-OnDemand mode valid client cert is required.<BR />(P5836-T8200)Debug(9482): 02/23/24 10:50:48:960 Failed to get portal config from portal gp.vacu.org.<BR />(P5836-T8200)Debug(9524): 02/23/24 10:50:48:960 Try to restore last portal config from file.<BR />(P5836-T8200)Debug(9575): 02/23/24 10:50:48:960 Skip retrieve cached portal configuration for empty user<BR />(P5836-T8200)Debug(9492): 02/23/24 10:50:48:960 Set portal status to valid client cert needed.<BR />(P5836-T8200)Debug(9502): 02/23/24 10:50:48:960 portal status is Client Cert Required.<BR />(P5836-T8200)Debug(8725): 02/23/24 10:50:48:960 Portal required client certificate is not found.<BR />(P5836-T8200)Debug(1953): 02/23/24 10:50:48:960 unknown network type.<BR />(P5836-T8196)Debug(2625): 02/23/24 10:50:48:960 Setting debug level to 5<BR />(P5836-T8200)Info ( 531): 02/23/24 11:14:53:659 msgtype = portal</P> <P>&nbsp;</P> <P>&nbsp;</P> Mon, 26 Feb 2024 02:54:14 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-client-certificate-authentication-issues/m-p/578286#M5016 ePlus_MSC 2024-02-26T02:54:14Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-client-certificate-authentication-issues/m-p/578293#M5017 <P>Hello&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/157548">@ePlus_MSC</a>&nbsp;</P> <P>The logs match to below KB, please have a look:</P> <P><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClolCAC" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClolCAC</A></P> <P>&nbsp;</P> Mon, 26 Feb 2024 05:44:16 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-client-certificate-authentication-issues/m-p/578293#M5017 akuzhuppilly 2024-02-26T05:44:16Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-client-certificate-authentication-issues/m-p/578822#M5048 <P>It seems like some compatibility issue with Certificate..</P> <P>Please refer below article</P> <P><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFoCAK" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFoCAK</A></P> Thu, 29 Feb 2024 10:47:07 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-client-certificate-authentication-issues/m-p/578822#M5048 Ravi_Jadav 2024-02-29T10:47:07Z