agent-user-override-key bad encryption or wrong masterkey after updating Panorama Master Key

R.Deckard — Tue, 25 Jun 2024 18:51:15 GMT

Mainly creating this to share the resolution as there doesn't seem to be anything publicly available on this topic. After updating the master key on all of our devices using the below guide I was no longer able to push changes from Panorama to the Prisma Access Mobile Users - GlobalProtect group.

Luckily I was able to take a glance at the config and noticed this "Edit master key" option within Panorama > Cloud Services > Configuration > Service Setup > Service Operations(right side pane). I opened a ticket with Palo Alto who also confirmed there is no publicly available doc on this, but this is the spot to make the change and was also told there would be no impact from updating this for the GlobalProtect users or Service Connections.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/certificate-management/configure-the-master-key

Re: agent-user-override-key bad encryption or wrong masterkey after updating Panorama Master Key

R.Deckard — Tue, 25 Jun 2024 18:52:05 GMT

Here's the image blown up.

Re: agent-user-override-key bad encryption or wrong masterkey after updating Panorama Master Key

Vickynet — Wed, 26 Jun 2024 14:13:01 GMT

@R.Deckard wrote:

Here's the image blown up.

@R.Deckard , thank you for sharing this. Very helpful.

topic Re: agent-user-override-key bad encryption or wrong masterkey after updating Panorama Master Key in Prisma Access Discussions

agent-user-override-key bad encryption or wrong masterkey after updating Panorama Master Key

Re: agent-user-override-key bad encryption or wrong masterkey after updating Panorama Master Key

Re: agent-user-override-key bad encryption or wrong masterkey after updating Panorama Master Key