Commit Error seen after Upgrading Panorama to 6.0.7 or 6.1.0 and Above

Issue

The following error can be seen on Panorama after upgrading to 6.0.7 or 6.1.x, and then attempting a commit:

Validation Error:

deviceconfig -> system -> secure-proxy-password bad encryption or wrong masterkey

deviceconfig -> system -> secure-proxy-password is invalid

Cause

The commit error above occurs because the Palo Alto Networks device can encrypt the secure-proxy password. This was not possible in versions prior to 6.0.7 and 6.1.x.

Resolution

Reconfigure the secure-proxy password from Panorama > Setup > Services, as shown in the following example:

This is required, because the secure proxy password was configured before the upgrade and it will need to be reconfigured again so that device can encrypt it. If the secure proxy password is not reconfigured, the device will throw a commit error.

owner: msharma