topic No valid device certificate found in General Topics

No valid device certificate found

Deepak25 — Fri, 04 Jun 2021 05:31:07 GMT

We have upgraded only Panorama to panos 10.5 , after that we are getting below system alert from all firewalls :

SYSTEM ALERT : high : No valid device certificate found

What is the meaning of this alert ?

We haven't enabled the features mentioned in below link , still we are getting this alert for all managed devices

https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/manage-firewalls/install-the-device-certificate-for-managed-firewalls.html

Resolution is mentioned in below link , but where we can find actual setting done on Panorama or firewall causing this alerts ?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAayCAG&lang=en_US%E2%80%A9

Re: No valid device certificate found

BPry — Sat, 05 Jun 2021 04:20:39 GMT

@Deepak25,

This will trigger in PAN-OS 10 regardless of whether or not you're configuration actually requires its use or not. You can either load a device certificate, or ignore the alert and exclude it from any log settings that you have that may be sending you alerts due to it being a High severity alert.

Re: No valid device certificate found

JeongchaeYun — Thu, 17 Mar 2022 09:08:09 GMT

Can you explain in detail how to exclude the log?

Re: No valid device certificate found

BPry — Thu, 17 Mar 2022 20:27:34 GMT

@JeongchaeYun,

In your Log Setting that is forwarding these alerts, simply add the following to the filter that you have.

not (description contains 'No valid device certificate found')