topic Re: Panorama Device Removal in General Topics

Panorama Device Removal

Mick_Ball — Wed, 15 May 2019 12:39:20 GMT

I had to rebuild Panorama 7 on ESX as for some reason after a power outage the image could not be restored...

New installation completed and licensed but I cannot get the firewall 3020 to connect.

I have removed the Panorama settings from firewall and re-applied.

I have added the serial number to Panorama but the firewall is complaining.....

Error: pan_cmsa_tcp_channel_setup(src_panos/cms_agent.c:623): cms sent untrusted cert!!

I can see the certificate via cli "show panorama-certificate", this shows the certificate from the original Panorama connection but cannot remove it.

So, what do i need to do to rejoin to a new Panorama installation.

reaper — Wed, 15 May 2019 13:21:14 GMT

give this a try:

> delete authentication user-file ssh-known-hosts user ip <panoramaIP> username panorama

Mick_Ball — Wed, 15 May 2019 13:31:58 GMT

Thanks for your reply...

ssh-known-hosts does not exist yet for panorama

reaper — Wed, 15 May 2019 13:45:42 GMT

you do that on the firewalls, not on the new panorama

it erases the ssh-known-hosts entry they have for the previous panorama so they can create a new one for the same IP

Mick_Ball — Wed, 15 May 2019 14:04:39 GMT

s I did try this on the firewall, I also chnaged Panorama IP but to no avail.