Panorama "Failed to backup config. Reason: No certificate or certificate is invalid"

[JuanMAbellan]

Hello,

we are seeing this error message in our Panorama.

Can anyone tell me why are receiving this message?

Regards

[PavelK]

Hello @JuanMAbellan

thanks for post!

To my knowledge the only time Panorama backs up Firewall's configuration is local commit on Firewall that will trigger automatic config backup: Manage Panorama and Firewall Configuration Backups.

From the provided information it is hard to determine why there is a certificate error preventing config backup.

Would it be possible to check ms.log and configd.log on Panorama from CLI to see it can give more details?

Are you using custom certificate for communication with managed Firewall?

Are you using the same time zone and time on Panorama as well as Firewall?

Kind Regards

Pavel

[JuanMAbellan]

Hello @PavelK ,

i have reviewed the files ms.log and configd.log and there is no information about the message.

The time zone is the same in the firewalls and Panorama.

There is no local commit in the firewalls around the hour of the logs.

Any clue what could it be?

Regards

[PavelK]

Hello @JuanMAbellan

thank you for reply.

Unfortunately, I am running out of ideas.

Have you set in Panorama any configuration backup?

In System logs, can you see any other logs related to any task prior to "Failed to backup config" error?

Kind Regards

Pavel