If the certificate expires or is missing, you must a new one from the Palo Alto support certificate authority (CA).
The firewall must have the correct date and time to validate the certificate. Use a reliable NTP server to avoid validation errors. palo alto fetch device certificate
To "fetch" a device certificate in Palo Alto Networks PAN-OS, you typically use a generated from the Customer Support Portal to authenticate the firewall or Panorama to the cloud services . Feature Overview: Fetching Device Certificates If the certificate expires or is missing, you
While many newer models, such as the PA-400 or PA-5400 series, install these automatically during registration, older or specific deployments may require you to manually . How to Fetch a Palo Alto Device Certificate install these automatically during registration