cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Who rated this post

agent-user-override-key bad encryption or wrong masterkey after updating Panorama Master Key

L0 Member

Mainly creating this to share the resolution as there doesn't seem to be anything publicly available on this topic. After updating the master key on all of our devices using the below guide I was no longer able to push changes from Panorama to the Prisma Access Mobile Users - GlobalProtect group.

 

Luckily I was able to take a glance at the config and noticed this "Edit master key" option within Panorama > Cloud Services > Configuration > Service Setup > Service Operations(right side pane). I opened a ticket with Palo Alto who also confirmed there is no publicly available doc on this, but this is the spot to make the change and was also told there would be no impact from updating this for the GlobalProtect users or Service Connections.

 

 

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/certificate-management/configure-the-mast...

Who rated this post