topic Re: Failed to generate CSR Device Certificate - PA-520 - in General Topics https://live.paloaltonetworks.com/t5/general-topics/failed-to-generate-csr-device-certificate-pa-520/m-p/1254094#M126435 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/823418819">@Bryan01</a>&nbsp;,</P> <P>&nbsp;</P> <P>I've seen similar issues when&nbsp;<SPAN>renewal is failing because the `/opt/pancfg/mgmt/ssl/private` partition storing private keys and certificates, was 100% full, preventing the generation of new CSRs and other SSL operations.<BR /><BR />Also could be related to&nbsp;<STRONG class="ph b">PAN-313623&nbsp;</STRONG>as seen in these release notes:<BR /><A href="https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-h3-addressed-issues" target="_blank">https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-h3-addressed-issues</A></SPAN></P> <P>&nbsp;</P> <P><SPAN>I recommend reaching out to TAC to confirm you're hitting this issue.</SPAN></P> <P>&nbsp;</P> <P><SPAN>Kind regards,</SPAN></P> Fri, 15 May 2026 09:08:54 GMT kiwi 2026-05-15T09:08:54Z Failed to generate CSR Device Certificate - PA-520 - https://live.paloaltonetworks.com/t5/general-topics/failed-to-generate-csr-device-certificate-pa-520/m-p/1254026#M126425 <P>Hello community, I encountered this error when trying to update the certificate device on a PA 520 firewall, running PAN-12.1.4-h2. Is there a known solution to this problem?</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Bryan01_0-1778768869809.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/71421i3DFF3F80F69FC349/image-size/medium?v=v2&amp;px=400" role="button" title="Bryan01_0-1778768869809.png" alt="Bryan01_0-1778768869809.png" /></span></P> <P>&nbsp;</P> Thu, 14 May 2026 14:32:31 GMT https://live.paloaltonetworks.com/t5/general-topics/failed-to-generate-csr-device-certificate-pa-520/m-p/1254026#M126425 Bryan01 2026-05-14T14:32:31Z Re: Failed to generate CSR Device Certificate - PA-520 - https://live.paloaltonetworks.com/t5/general-topics/failed-to-generate-csr-device-certificate-pa-520/m-p/1254094#M126435 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/823418819">@Bryan01</a>&nbsp;,</P> <P>&nbsp;</P> <P>I've seen similar issues when&nbsp;<SPAN>renewal is failing because the `/opt/pancfg/mgmt/ssl/private` partition storing private keys and certificates, was 100% full, preventing the generation of new CSRs and other SSL operations.<BR /><BR />Also could be related to&nbsp;<STRONG class="ph b">PAN-313623&nbsp;</STRONG>as seen in these release notes:<BR /><A href="https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-h3-addressed-issues" target="_blank">https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-h3-addressed-issues</A></SPAN></P> <P>&nbsp;</P> <P><SPAN>I recommend reaching out to TAC to confirm you're hitting this issue.</SPAN></P> <P>&nbsp;</P> <P><SPAN>Kind regards,</SPAN></P> Fri, 15 May 2026 09:08:54 GMT https://live.paloaltonetworks.com/t5/general-topics/failed-to-generate-csr-device-certificate-pa-520/m-p/1254094#M126435 kiwi 2026-05-15T09:08:54Z