Failed to authenticate using OTP provided. Please check that OTP has not expired and has been generated for correct Panorama.

Failed to authenticate using OTP provided. Please check that OTP has not expired and has been generated for correct Panorama.

1944
Created On 01/25/24 05:20 AM - Last Modified 03/11/25 22:37 PM


Symptom


  • OTP has been generated for fetching panorama certificate used for cloud service plugin.
  • "request plugins cloud_services panorama-certificate fetch debug yes otp" is run.
  • Now the error message "Failed to authenticate using OTP provided. Please check that OTP has not expired and has been generated for correct Panorama." is displayed
    admin@xxxxx> request plugins cloud_services panorama-certificate fetch debug yes otp 1234567890abcdef1234567890abcdef
    
    Failed to authenticate using OTP provided. Please check that OTP has not expired and has been generated for correct Panorama.
    =========== DEBUG BEGINS ===========
    
    =========== DEBUG ENDS ===========
    Failure

 

 



Environment


  • Panorama
  • Cloud Services Plugin
  • Prisma Access


Cause


  • OTP generated is for "Device certificate" and not for "Cloud services".
  • The cloud services OTP must be 300 characters or more, whereas Device certificate OTP is 32 characters.
  • The OTP generated for device certificate when used for cloud services will cause the above failure.

 



Resolution


Generate a new OTP by the following correct procedure at Verify Your Account Using the One-Time Password.



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000XhbsCAC&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail