[China] Can't get device certificate on PA440

[Sauneuf]

Hi everyone, We are based in Shanghai and we encounter an issue to generate a device certificate. On the web interface, we don't have the "Get certificat" option 

And when i try to request via CLI, nothing happen with the cmd "request certificate fetch"

and i have a invalid syntax with "request certificate fetch opt 'opt number'"

Thank in advance for your help

[Sauneuf · Accepted solution]

Solution found :

I created a security policy with allowing app "paloalto-shared-services"