How to troubleshoot certificate fetch failure for Cortex Data Lake (CDL)

> show ntp

1. For release 10.1or later, the device-certificate can be fetched using CLI below, where <value> is the one time password OTP needed to fetch the certificate from the customer support portal CSP server:

   > request certificate fetch otp <value>  

2. For release 10.0 or earlier, fetch the Logging-service certificate. Log files to check if any issue during the fetch is ms.log. CLI to manually fetch the Logging-service certificate in case of issues seen:
   1. For firewall managed by panorama:

      > request logging-service-forwarding certificate fetch

   2. For unmanaged firewall:

      > request logging-service-forwarding certificate fetch-noproxy pre-shared-key <value>

      here value is the pre-shared key from the customer support portal CSP.
   3. If needed to delete the CDL/logging service certificate prior to re-fetching it use:

      > request logging-service-forwarding certificate delete