Panorama Device Removal

[Mick_Ball]

I had to rebuild Panorama 7 on ESX as for some reason after a power outage the image could not be restored...

New installation completed and licensed but I cannot get the firewall 3020 to connect.

I have removed the Panorama settings from firewall and re-applied.

I have added the serial number to Panorama but the firewall is complaining.....

Error:  pan_cmsa_tcp_channel_setup(src_panos/cms_agent.c:623): cms sent untrusted cert!!

I can see the certificate via cli "show panorama-certificate", this shows the certificate from the original Panorama connection but cannot remove it.

So, what do i need to do to rejoin to a new Panorama installation. 

[reaper]

give this a try:

> delete authentication user-file ssh-known-hosts user ip <panoramaIP> username panorama 

[Mick_Ball]

@reaper 

Thanks for your reply...

ssh-known-hosts does not exist yet for panorama

[reaper]

you do that on the firewalls, not on the new panorama

it erases the ssh-known-hosts entry they have for the previous panorama so they can create a new one for the same IP

[Mick_Ball]

s I did try this on the firewall,  I also chnaged Panorama IP but to no avail.