Strata Logging Service connection in Panorama UI shows "Unable to connect to API gateway. (56, 'OpenSSL SSL_read: error:xxxxx:SSL routines:ssl3_read_bytes:sslv3 alert certificate expired, errno 0')".
5008
Created On 07/01/24 02:48 AM - Last Modified 08/23/24 07:33 AM
Symptom
- Strata Logging Service connection in Panorama UI shows "Unable to connect to API gateway. (56, 'OpenSSL SSL_read: error:xxxxx:SSL routines:ssl3_read_bytes:sslv3 alert certificate expired, errno 0')".
GUI: Panorama > Cloud Services > Status menu > Status tab > Strata Logging Service
Environment
- Panorama managed Prisma Access
- Strata Logging Service(Previously Cortex Data Lake)
Cause
- Panorama does not have a valid certificate.
- Using "show device-certificate status" displays the expired certificate.
> show device-certificate status
Device Certificate information:
Current device certificate status: Expired
Not valid before: 2024/03/23 22:57:29 JST
Not valid after: 2024/06/21 22:57:28 JST
Last fetched timestamp: 2024/03/23 23:07:29 JST
Last fetched status: success
Last fetched info: Successfully fetched Device CertificateResolution
- Replace the expired device certificate. Procedures are here.
- Delete the license and certificate.
- Create a new certificate with the new one-time password (OTP). This will also create a new certificate.
- Follow the procedure documented at "Reset Your Panorama Managed Prisma Access License".