Error message "Maximum number of managed device reached" after upgrading Panorama to 10.1.8

Error message "Maximum number of managed device reached" after upgrading Panorama to 10.1.8

13530
Created On 12/13/22 18:04 PM - Last Modified 12/06/23 04:10 AM


Symptom


  • After upgrade Panorama from 10.1.x to 10.1.8, licensed-device-capacity reduced to 25, The pre upgrade licensed-device-capacity was 100
  • Commit push to devices failed with the below error:
Validation Error:
mgt-config -> devices -> <serial number> constraints failed : Maximum number of managed devices reached
mgt-config -> devices is invalid


 


Environment


  • Any Panorama
  • PAN-OS Upgrade 10.1.x and 10.1.8
  • License keys


Cause


  • There are multiple device management license keys on the Panorama. 
  • When multiple license keys exist for the same feature and their expiration dates are 'never', but issue dates are different condition check fails with logic error.
  • That causes configd process choosing the oldest key file and prevents commit push to devices due to > 25 managed devices
Note: CLI command "> delete license key <hit-tab>" displays all the device management keys.


Resolution


  1. This is a known issue reported in PAN-208537 and the target fix versions are 10.1.9, 10.2.4, 11.0.1
  2. The workaround is deleting the older existing device management license key from Panorama CLI (Note: The Tab key can be used to auto-complete the file name):
> delete license key <license-name-key>
  • Then re-fetch the licenses (or retrieve licenses from the server on WebUI):
> request license fetch
  • Verify the licenses again (or go to GUI: Panorama > Licenses):
> request license info 


 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kFccCAE&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language