GlobalProtect Client Certificate Authentication Issues

[ePlus_MSC]

The Authentication keeps failing with the following:

P5836-T8200)Debug(8265): 02/23/24 10:50:48:959 REGION-PRIO, region code is US
(P5836-T8200)Debug(15492): 02/23/24 10:50:48:960 REGION-PRIO, save region code US
(P5836-T8200)Debug(8551): 02/23/24 10:50:48:960 prelogin status is Error
(P5836-T8200)Error(8554): 02/23/24 10:50:48:960 pre-login error message: Valid client certificate is required
(P5836-T8200)Debug(9457): 02/23/24 10:50:48:960 Non-OnDemand mode valid client cert is required.
(P5836-T8200)Debug(9482): 02/23/24 10:50:48:960 Failed to get portal config from portal gp.vacu.org.
(P5836-T8200)Debug(9524): 02/23/24 10:50:48:960 Try to restore last portal config from file.
(P5836-T8200)Debug(9575): 02/23/24 10:50:48:960 Skip retrieve cached portal configuration for empty user
(P5836-T8200)Debug(9492): 02/23/24 10:50:48:960 Set portal status to valid client cert needed.
(P5836-T8200)Debug(9502): 02/23/24 10:50:48:960 portal status is Client Cert Required.
(P5836-T8200)Debug(8725): 02/23/24 10:50:48:960 Portal required client certificate is not found.
(P5836-T8200)Debug(1953): 02/23/24 10:50:48:960 unknown network type.
(P5836-T8196)Debug(2625): 02/23/24 10:50:48:960 Setting debug level to 5
(P5836-T8200)Info ( 531): 02/23/24 11:14:53:659 msgtype = portal

[akuzhuppilly]

Hello @ePlus_MSC 

The logs match to below KB, please have a look:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClolCAC

[Ravi.Jadav]

It seems like some compatibility issue with Certificate..

Please refer below article

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFoCAK