PA 3060 HA config & PSA Key Input CLI

[KeepGoing]

Hi 

I used to use Juniper SRX and want to check PAN 3060 HA. Basically i assume once 3060 ha is established, I can dump config on Primary and once i do commit then it will be copied to secondary 3060.

One quick quesiton for VPN PSA key input. It shows "pre-shared-key key -AQ= xxx" on existing config.

set network ike gateway newyorkxx authentication pre-shared-key key -AQ==xxx

But let's say i have new BOX and need to config PSA key. The CLI command will be 

set network ike gateway newyorkxx authentication pre-shared-key "key value" with out -AQ

I will do lab but appreciate if someone can confirm.

Thanks!!