Firefox https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?

id=kA14u000000HAayCAG

Why is the system log logging "No valid device certificate found"?

21196
Created On 09/02/20 00:32 AM - Last Modified 09/15/20 03:17 AM

PA-220 Firewall PA-3200 Series PA-5000 Series PA-5200 Series PA-7000 Series Certificate Management Hardware 9.1 10.0 Hardware PAN-OS

Question
Why is the system log logging "No valid device certificate found"?

Example:

System Log:
2020/09/01 04:04:06 high general general 0 No valid device certificate found
2020/08/31 04:03:34 high general general 0 No valid device certificate found
2020/08/30 04:03:02 high general general 0 No valid device certificate found
2020/08/29 04:04:30 high general general 0 No valid device certificate found
2020/08/28 04:03:58 high general general 0 No valid device certificate found
2020/08/27 04:03:26 high general general 0 No valid device certificate found
2020/08/26 20:35:00 high general general 0 No valid device certificate found

WebUI

1 de 3 28/4/2021 08:58
Firefox https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAayCAG

Environment

Palo Alto Firewall.

PAN-OS 9.1.2 and above.

Answer

Starting PANOS 9.1.2 version, a device certificate is required.

If no a device certificate is installed:
1. No valid device certificate found log will be generated in the system log.
2. Device certificate not found will be shown in the Device Certificate Tab.

To resolve:

1. Log in to the Customer Support Portal

2. Select Assets > Device Certificates and Generate OTP.

2 de 3 28/4/2021 08:58
Firefox https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAayCAG

3. For the Device Type, select Generate OTP for Next-Gen Firewalls.
4. Select your PAN OS Device serial number.
5. Generate OTP and copy the OTP.
6. Log in to your next-generation firewall as an admin user.
7. Select Device > Setup > Management > Device Certificate and Get Certificate.
8. Paste the One-time Password you generated and click OK.
9. Your next-generation firewall successfully retrieves and installs the certificated.

Note: After a correct device certificate is successfully installed.

Additional Information
For more details on installing a device certificate, click this link: Install a Device Certificate

3 de 3 28/4/2021 08:58