HA pair not syncing after SSL cert change

luisfelipeh1 — Fri, 11 Oct 2024 19:17:33 GMT

Hi there folks,

I'm trying to troubleshoot an issue with 2 firewalls where we uploaded the same SSL cert in both FWs and now they are not syncing.

Our troubleshooting efforts have come to the following:
- Reboot management server on both firewalls.

- Config didn't change, this was working before the cert change.

- removing and readding the cert while Config Sync is turned off

- Adding the certificate and the SSL/TLS Service Profile "GP_CertificateProfile" to only the active device and sync (with original certificate and new certificate)

- Adding the certificate and the SSL/TLS Service Profile "GP_CertificateProfile" to both the active and passive device and sync (with original certificate and new certificate)

- Followed this other live community post:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004OHyCAM&lang=en_US%E2%80%A9

- This other KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClgSCAS

The exact error is the following:|

Would appreciate any guidance.

Thanks.

topic HA pair not syncing after SSL cert change in Next-Generation Firewall Discussions

HA pair not syncing after SSL cert change