Sounds like the configuration didn't migrate properly. I'd try just going into the 'User Identification' settings under the Device tab and opening up the 'User-ID Agents' tab and verifying that these settings look correct for your environment. Then go into each entry and just hit OK. Sometimes that's enough to get the GUI to straighten things out for you without having to dive into the XML file.
I also received this error while trying to push changes from Panorama to the firewall after upgrading to V10. Luckly, it only occurred on one PA-850, which was in my QA environment. Downgrading from 10.0.4 to 9.1.7 (original) didn't fix the issue.
What I did to fix the issue was force the template values from Panorama to the Firewall which allowed the commit to be successful. Before you do this make sure you have a backup copy of the existing configuration of the affected firewall. Make sure that the template values on the Panorama doesn't change/break your management interface.
Step 1: Force values from Panorama
Step 2: Reload saved config and commit.
This should clear up the errors and allow you to push new changes.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!