Unable to apply Device Certificate

[J.Santos708860]

Hi Everyone, I am following the instructions to apply the device certificate, but I am blocked by the following error:
“Unable to execute OTP install operations command to some firewalls. Please identify the firewalls that failed the process from Panorama and retry OTP.”

I followed the instructions provided in this link:
https://live.paloaltonetworks.com/t5/customer-advisories/update-to-additional-pan-os-certificate-exp...

My setup is as follows:

• Panorama: Software version 11.1.6-h3

• NGFW: Model PA-850, Software version 11.1.6-h3

The command below shows the following output:

show device-certificate status

Device Certificate Information:

• Current device certificate status: Valid

• Not valid before: 2025/12/26 05:26:50 CST

• Not valid after: 2026/03/26 06:26:49 CDT

• Last fetched timestamp: 2026/02/04 10:42:39 CST

• Last fetched status: Failure

• Last fetched info: Failed to fetch device certificate. OTP is not valid

Has anyone encountered the same issue?

Thank you

[BPry]

@J.Santos708860,

At least in the example that you posted, you have an active certificate as of 2025/12/26 and you do not need another one. If you're trying to go through this workflow again with a valid certificate it's going to error, so from what you're showing this is what I would expect and you don't need to take any further action here.