unable to renew device certificate

[Administrator.Klina]

Hi everyone,

i'm having an issue regarding the device certificate on a pa-440 panos 10.1.6-h3

at the moment i am getting a a message  device certificate not found.

but u don't have any options to get a new one in the GUI.

is there a way to trigger the check for a certificate in the CLI ?

[PavelK]

Hello @Administrator.Klina

I am not aware of any known issue in 10.1.6-h3. By checking Firewall with the same version, I can see the option: "Get Certificate". Could you try to restart management process: "debug software restart process management-server".

Kind Regards

Pavel

[Administrator.Klina]

Hi PavelK,

can u restart the managment process without downtime ?

[PavelK]

Hello @Administrator.Klina

thank you for reply.

Details are in below knowledge base:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaGCAS

There is no down time, you will only get thrown away from CLI/GUI.

Kind Regards

Pavel

[Administrator.Klina]

The restart of the management process din't work.

still no option to check for the certificate.

is there a way to check for the certificate in the CLI ?

[Administrator.Klina]

After a commit of a new security policy the device certificate magically appeared 

Problem solved