<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Failed to validate client certificate, thread : 0, 1-0! in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/failed-to-validate-client-certificate-thread-0-1-0/m-p/1225198#M123815</link>
    <description>&lt;P&gt;Hi team&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Version PA&amp;nbsp;&lt;A href="https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h3-addressed-issues" target="_blank" rel="noopener nofollow noreferrer"&gt;11.1.6-h3&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;Model 1420&lt;/P&gt;
&lt;P&gt;Version USER_ID&amp;nbsp;&lt;A href="https://docs.paloaltonetworks.com/pan-os/11-0/user-id-agent-release-notes/user-id-agent-release-information/user-id-agent-addressed-issues" target="_blank" rel="noopener nofollow noreferrer"&gt;11.0.1&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;Windows 2019&lt;/P&gt;
&lt;P&gt;We have had an incident with the User ID agents, which have been disconnected from the firewall. &lt;BR /&gt;In the logs of the firewall itself the error message was: “Redistribution Agent &amp;lt;agent name&amp;gt;: details: close connection to agent”. &lt;BR /&gt;On the other hand, reviewing the agents' own logs we have found the following logs:&lt;/P&gt;
&lt;P&gt;03/25/25/25 03:40:25:077[ Info 1700]: Connection 111.111.111.111.111 : 19567 closed.&lt;BR /&gt;03/25/25 03:40:30:108[ Info 1304]: New connection 111.111.111.111.111 : 22728.&lt;BR /&gt;03/25/25 03:40:30:108[ Info 1377]: Device thread 0 with 111.111.111.111.111 : 22728 is started.&lt;BR /&gt;03/25/25 03:40:30:124[Error 3498]: Failed to validate client certificate, thread : 0, 1-0!&lt;/P&gt;
&lt;P&gt;We have solved the problem by restarting the process distributord in the firewall with the following command: “debug software restart process distributord”.&lt;/P&gt;
&lt;P&gt;Any idea?&lt;/P&gt;
&lt;P&gt;Regards&lt;/P&gt;</description>
    <pubDate>Mon, 31 Mar 2025 10:53:52 GMT</pubDate>
    <dc:creator>Alpalo</dc:creator>
    <dc:date>2025-03-31T10:53:52Z</dc:date>
    <item>
      <title>Failed to validate client certificate, thread : 0, 1-0!</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/failed-to-validate-client-certificate-thread-0-1-0/m-p/1225198#M123815</link>
      <description>&lt;P&gt;Hi team&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Version PA&amp;nbsp;&lt;A href="https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-6-known-and-addressed-issues/pan-os-11-1-6-h3-addressed-issues" target="_blank" rel="noopener nofollow noreferrer"&gt;11.1.6-h3&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;Model 1420&lt;/P&gt;
&lt;P&gt;Version USER_ID&amp;nbsp;&lt;A href="https://docs.paloaltonetworks.com/pan-os/11-0/user-id-agent-release-notes/user-id-agent-release-information/user-id-agent-addressed-issues" target="_blank" rel="noopener nofollow noreferrer"&gt;11.0.1&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;Windows 2019&lt;/P&gt;
&lt;P&gt;We have had an incident with the User ID agents, which have been disconnected from the firewall. &lt;BR /&gt;In the logs of the firewall itself the error message was: “Redistribution Agent &amp;lt;agent name&amp;gt;: details: close connection to agent”. &lt;BR /&gt;On the other hand, reviewing the agents' own logs we have found the following logs:&lt;/P&gt;
&lt;P&gt;03/25/25/25 03:40:25:077[ Info 1700]: Connection 111.111.111.111.111 : 19567 closed.&lt;BR /&gt;03/25/25 03:40:30:108[ Info 1304]: New connection 111.111.111.111.111 : 22728.&lt;BR /&gt;03/25/25 03:40:30:108[ Info 1377]: Device thread 0 with 111.111.111.111.111 : 22728 is started.&lt;BR /&gt;03/25/25 03:40:30:124[Error 3498]: Failed to validate client certificate, thread : 0, 1-0!&lt;/P&gt;
&lt;P&gt;We have solved the problem by restarting the process distributord in the firewall with the following command: “debug software restart process distributord”.&lt;/P&gt;
&lt;P&gt;Any idea?&lt;/P&gt;
&lt;P&gt;Regards&lt;/P&gt;</description>
      <pubDate>Mon, 31 Mar 2025 10:53:52 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/failed-to-validate-client-certificate-thread-0-1-0/m-p/1225198#M123815</guid>
      <dc:creator>Alpalo</dc:creator>
      <dc:date>2025-03-31T10:53:52Z</dc:date>
    </item>
    <item>
      <title>Re: Failed to validate client certificate, thread : 0, 1-0!</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/failed-to-validate-client-certificate-thread-0-1-0/m-p/1225253#M123832</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/192671"&gt;@Alpalo&lt;/a&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Have you only seen the behavior once or have you seen it once? Have you reviewed the distributord.log file on the firewall in question at all to see if the process potentially gives more insight into the error and to insure that logs are actually present? &lt;/P&gt;</description>
      <pubDate>Mon, 31 Mar 2025 21:50:43 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/failed-to-validate-client-certificate-thread-0-1-0/m-p/1225253#M123832</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2025-03-31T21:50:43Z</dc:date>
    </item>
    <item>
      <title>Re: Failed to validate client certificate, thread : 0, 1-0!</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/failed-to-validate-client-certificate-thread-0-1-0/m-p/1249436#M126092</link>
      <description>&lt;P&gt;First, thanks for posting, I had the same problem, which started following windows updates on the User-ID Windows Server.&lt;/P&gt;
&lt;P&gt;The log that ALpalo recommended ((system log, with a filter&amp;nbsp;( description contains 'Redistribution' ))&amp;nbsp; only showed 'connect-agent-failure' Event to each User-ID server&lt;/P&gt;
&lt;P&gt;Running&amp;nbsp;&lt;SPAN&gt;“debug software restart process distributord” got server re-connected.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Did this problem return for you, or was that a permanent fix? If it returned, what was the permanent fix?&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 04 Mar 2026 15:35:20 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/failed-to-validate-client-certificate-thread-0-1-0/m-p/1249436#M126092</guid>
      <dc:creator>MikeGill</dc:creator>
      <dc:date>2026-03-04T15:35:20Z</dc:date>
    </item>
  </channel>
</rss>

