Device Certificate Issue

AhamadullahM — Thu, 31 Mar 2022 12:28:30 GMT

Hi Team,

We are facing an issue with the device certificate. I have generated that OTP in the CSP portal and imported it into the firewall after I am facing the below issue

"Failed to fetch device certificate. Failed to send a request to the CSP server. Error: Operation timed out after 60000 milliseconds with 0 bytes received."

Attached the screenshot also. kindly help to resolve the issue ASAP.

Thanks for your prompt reply.

Regards,

AHAMADULLAH.M

Re: Device Certificate Issue

aleksandar.astardzhiev — Thu, 31 Mar 2022 18:06:52 GMT

Hi @AhamadullahM ,

"Operation timed out" usually means that firewall is not able to reach the CSP server over internet.

By default firewall will use its dedicated management interface to reach any Palo Alto services.

I would suggest to start with the following:

- Confirm firewall dedicated mgmt interface have Internet connectivity. Check if there is any filter allowning only specific traffic

- Confirm you firewall have DNS server configured and this DNS server can resolve public domains

If the management network does not have any internet access, you can use one of the dateplane interfaces by configuring service route for "Palo Alto Services".

Make sure your firewall clock is synced (configure NTP). Incorrect time shouldn't cause "operation timed out", error, but it is could cause issues since the certificates are time sensitive.

topic Re: Device Certificate Issue in General Topics

Device Certificate Issue

Re: Device Certificate Issue