11-13-2020 12:16 AM - edited 11-13-2020 12:19 AM
For those who might be interested, I finally figured out why this was not working.
This was due to server-side encryption being enabled on the S3 bucket.
After disabling server-side encryption on the S3 bucket, the bootstrap worked fine and the content updates could also be installed. Please note that you will need at list version 9.1.7 or 10.0.2 if you want the self-registration to Panorama to work together with the installation of content updates during the bootstrap, otherwise autocommit will fail at the end of the bootstrap process and your vm-series will not self-register to panorama using its vm-auth-key.
Many thanks to the Palo Alto TAC Engineer who took the time to reproduce this in his lab to confirm what was the expected behavior.
