topic Re: unable to renew device certificate in General Topics

unable to renew device certificate

Administrator.Klina — Mon, 05 Sep 2022 12:46:45 GMT

Hi everyone,

i'm having an issue regarding the device certificate on a pa-440 panos 10.1.6-h3

at the moment i am getting a a message device certificate not found.

but u don't have any options to get a new one in the GUI.

is there a way to trigger the check for a certificate in the CLI ?

Re: unable to renew device certificate

PavelK — Tue, 06 Sep 2022 01:45:58 GMT

Hello @Administrator.Klina

I am not aware of any known issue in 10.1.6-h3. By checking Firewall with the same version, I can see the option: "Get Certificate". Could you try to restart management process: "debug software restart process management-server".

Kind Regards

Pavel

Re: unable to renew device certificate

Administrator.Klina — Tue, 06 Sep 2022 09:00:54 GMT

Hi PavelK,

can u restart the managment process without downtime ?

Re: unable to renew device certificate

PavelK — Tue, 06 Sep 2022 13:04:00 GMT

Hello @Administrator.Klina

thank you for reply.

Details are in below knowledge base:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaGCAS

There is no down time, you will only get thrown away from CLI/GUI.

Kind Regards

Pavel

Re: unable to renew device certificate

Administrator.Klina — Thu, 08 Sep 2022 09:33:01 GMT

The restart of the management process din't work.

still no option to check for the certificate.

is there a way to check for the certificate in the CLI ?

Re: unable to renew device certificate

Administrator.Klina — Thu, 08 Sep 2022 09:42:57 GMT

After a commit of a new security policy the device certificate magically appeared

Problem solved