Device Certificate fetch pending

F.Harits — Tue, 10 Feb 2026 07:06:36 GMT

On a Palo Alto Networks PA-3410, I ran the following command:

request certificate fetch otp <otp_value>

But, the job is created but remains Pending (0%) and never completes, even after multiple retries.
Currently, the device certificate status is still none.

with the job status as follows:

2026/02/09 21:20:59 21:20:59 33870 Device-certificate-fetch ACT PEND 0%
2026/02/09 14:07:16 14:07:16 33780 Device-certificate-fetch ACT PEND 0%
2026/02/08 13:04:23 13:04:23 33477 Device-certificate-fetch ACT PEND 0%
2026/02/07 14:55:48 14:55:48 33208 Device-certificate-fetch ACT PEND 0%
2026/02/07 13:58:03 13:58:03 33193 Device-certificate-fetch ACT PEND 0%
2026/02/07 13:07:52 13:07:52 33180 Device-certificate-fetch ACT PEND 0%

Has anyone encountered this issue before?
What was the solution to successfully complete the device certificate fetch?

Re: Device Certificate fetch pending

TomYoung — Tue, 10 Feb 2026 19:56:48 GMT

Hi @F.Harits ,

Open a TAC case. They will walk you through gaining root access (through challenge and response only available to TAC). They will run Python scripts to remove the invalid certificate and add a new one.

Thanks,

Tom

topic Device Certificate fetch pending in Next-Generation Firewall Discussions

Device Certificate fetch pending

Re: Device Certificate fetch pending