FYI - Here is a workaround for someone who wants to bring up the HA1 Backup before fixing it by upgrading the PAN-OS (if it's a bug - last time it was).
Step 1. Change the Port type from ha1-b to management on Active firewall and Commit (Device -> High Availability -> General > Control link (HA1 Backup)
Step 2. Revert back to the previous configuration with the Port type: ha1-b, along with the IP address and Commit.
This workaround should bring up the HA1 Backup.
Hope this helps!
* Refer to my blog with screenshots.
https://www.analysisman.com/2018/12/pan-3220-ha1backup.html
--
"The Simplicity is the ultimate sophistication." - Leonardo da Vinci.