Multiple "/opt/pancfg/mgmt/lcaas/ssl/private" directories are seen in "show system disk-space"

Multiple "/opt/pancfg/mgmt/lcaas/ssl/private" directories are seen in "show system disk-space"

9865
Created On 02/19/21 08:51 AM - Last Modified 12/30/22 03:46 AM


Symptom


Multiple "/opt/pancfg/mgmt/lcaas/ssl/private" directories are seen in "show system disk-space".
Example : 

> show system disk-space

Filesystem            Size  Used Avail Use% Mounted on
/dev/sda3             4.0G  2.8G 1012M  74% /
/dev/sda5             8.0G  4.1G  3.5G  54% /opt/pancfg
/dev/sda6             4.0G  3.3G  501M  88% /opt/panrepo
tmpfs                 4.8G  3.9G  967M  81% /dev/shm
/dev/sdb1             197G  140G   48G  75% /opt/panlogs
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private


Environment


  • Palo Alto Firewall
  • PAN-OS older than 8.1.15, 9.0.9 and 9.1.2.


Cause


  • It happens in PAN-OS 8.1.14, 9.0.8 and 9.1.1 or older. 
  • The directory will increase if management-server process is restarted. 
  • The directories are deleted when the device is restarted.


Resolution


  1. The issue has been fixed in 8.1.15, 9.0.9 and 9.1.2. Upgrading will resolve the issue.
  2. As a temporary workaround, these directories are removed after a reboot.
Before Reboot : 
> show system disk-space

Filesystem            Size  Used Avail Use% Mounted on
/dev/sda3             4.0G  2.8G 1012M  74% /
/dev/sda5             8.0G  4.1G  3.5G  54% /opt/pancfg
/dev/sda6             4.0G  3.3G  501M  88% /opt/panrepo
tmpfs                 4.8G  3.9G  967M  81% /dev/shm
/dev/sdb1             197G  140G   48G  75% /opt/panlogs
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
After Reboot :
> show system disk-space

Filesystem            Size  Used Avail Use% Mounted on
/dev/sda3             4.0G  2.8G 1012M  74% /
/dev/sda5             8.0G  4.1G  3.5G  54% /opt/pancfg
/dev/sda6             4.0G  3.3G  501M  88% /opt/panrepo
tmpfs                 4.8G  3.9G  967M  81% /dev/shm
/dev/sdb1             197G  140G   48G  75% /opt/panlogs
tmpfs                  12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HCwNCAW&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language