Installing clienless VPN is failling on PAN-OS 12.1.7

M.Mohsen906766 — Tue, 09 Jun 2026 08:39:34 GMT

Installing clientless VPN 98-260 is failing on PAN-OS 12.1.7 with the below error.

"Checking for IMA manifest signature file
ERROR: No IMA manifest signature file found!"

Is there a plan for a clientless vpn version to fix this ? can we know a ETA ?

Re: Installing clienless VPN is failling on PAN-OS 12.1.7

kiwi — Tue, 09 Jun 2026 09:21:45 GMT

Starting with PAN-OS 12.1, Palo Alto Networks introduced Linux IMA (Integrity Measurement Architecture) to enforce stricter product security. This kernel upgrade mandates that all content images be explicitly IMA-signed. Because the current public Clientless VPN content version (98-260) was released prior to this security gate, it lacks the required signature, causing the installation process to fail on PAN-OS 12.1.

While the official, universally signed content package is undergoing final QA validation before being published to the Customer Support Portal (CSP), a fully functional candidate image that resolves this issue is available through TAC.

Once the official package completes its final automated validation pipeline, it will be pushed globally via standard Dynamic Updates so manual workarounds will no longer be necessary.

Kind regards,

topic Installing clienless VPN is failling on PAN-OS 12.1.7 in General Topics

Installing clienless VPN is failling on PAN-OS 12.1.7

Re: Installing clienless VPN is failling on PAN-OS 12.1.7