New error after power outage event: CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com

[Benjaminnio]

Maybe I'm just low on sleep, but something doesn't seem to be lining up here. Had a power outage over the weekend and am now getting these High severity system notifications from a PA440 about every 10 minutes.

> CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com, Reason: self signed certificate in certificate chain

license.api.paloaltonetworks.com resolves to 35.238.108.32, so I can see in the traffic logs that the mgmt interface started attempting to connect to this address only after the firewall turned back on after the power outage. I can't seem to find any documentation that specifically references "license.api.paloaltonetworks.com" and the stuff that talks about "api.paloaltonetworks.com" only seems to refer to activating/deactivating licenses on VM series firewalls. I checked the licenses on the PA440, and all seems to be valid. Restarting the management server doesn't clear the error. I know that I could probably add the domain to a decryption exclusion rule, but why is this just now coming up? Nothing has changed, the power outage was just longer than the UPS could sustain. 

[IMTechSupport]

@Benjaminnio Hi Ben! Have you resolved this issue? I got the same exact issue with me just recently.

[MP18 · Accepted solution]

@IMTechSupport 

I had similar issue when I configured new PA running 10.2.4h4 fix was on our Internet PA I did exempt decryption policy for the Management IP PA.

Regards