topic Re: New error after power outage event: CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com in Next-Generation Firewall Discussions

New error after power outage event: CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com

Benjaminnio — Mon, 03 Apr 2023 15:29:23 GMT

Maybe I'm just low on sleep, but something doesn't seem to be lining up here. Had a power outage over the weekend and am now getting these High severity system notifications from a PA440 about every 10 minutes.

> CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com, Reason: self signed certificate in certificate chain

license.api.paloaltonetworks.com resolves to 35.238.108.32, so I can see in the traffic logs that the mgmt interface started attempting to connect to this address only after the firewall turned back on after the power outage. I can't seem to find any documentation that specifically references "license.api.paloaltonetworks.com" and the stuff that talks about "api.paloaltonetworks.com" only seems to refer to activating/deactivating licenses on VM series firewalls. I checked the licenses on the PA440, and all seems to be valid. Restarting the management server doesn't clear the error. I know that I could probably add the domain to a decryption exclusion rule, but why is this just now coming up? Nothing has changed, the power outage was just longer than the UPS could sustain.

Re: New error after power outage event: CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com

RVizcarra — Mon, 26 Jun 2023 09:18:30 GMT

@Benjaminnio Hi Ben! Have you resolved this issue? I got the same exact issue with me just recently.

Re: New error after power outage event: CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com

MP18 — Thu, 03 Aug 2023 05:40:30 GMT

@RVizcarra

I had similar issue when I configured new PA running 10.2.4h4 fix was on our Internet PA I did exempt decryption policy for the Management IP PA.

Regards

Re: New error after power outage event: CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com

Salathiwe — Thu, 16 Jan 2025 11:42:07 GMT

Having the issue only on the passive firewall.
Running active-passive

Re: New error after power outage event: CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com

MP18 — Tue, 21 Jan 2025 18:01:47 GMT

@Salathiwe Exempt the PA MGMT IP from the SSL Decryption.

Regards