Unable to commit on Panorama: Failed plugin validation

Unable to commit on Panorama: Failed plugin validation

4328
Created On 02/26/23 21:18 PM - Last Modified 06/14/23 03:33 AM


Symptom


  • Error message:
Details
Partial changes to commit: changes to configuration by administrators: admin
Changes to shared configuration
Failed plugin validation
  • plugin_cloud_services.log
2023-02-18 15:38:11.286 +0000 INFO: [daemon] etc file path /opt/pancfg/mgmt/plugins/appdata/cloud_services/etc/endpoints
2023-02-18 15:38:11.286 +0000 INFO: [daemon] Getting url for feature None
2023-02-18 15:38:11.286 +0000 INFO: [daemon] returning base url api.gpcloudservice.com
2023-02-18 15:38:28.162 +0000 ERROR: [daemon] Generic communication error occured.Failed to get server cert for revocation check Failed to do the OCSP/CRL checks@1. Continuing...
2023-02-18 15:38:44.655 +0000 DEBUG: [daemon] duration for license capabilities context fetch is '33369ms'
2023-02-18 15:38:44.655 +0000 DEBUG: [daemon] Response received is : '{'result': 'fail', 'message': "Unable to connect to API gateway. (6, 'Could not resolve host: api.gpcloudservice.com')"}'
2023-02-18 15:38:44.655 +0000 DEBUG: [daemon] Failed to get prisma access edition license capabilities
  • configd.log
Error:  pan_plugin_device_register_callback(pan_plugin_device.c:272): Event failed for plugin azure Plugin: malformed scripts/commit_added_device.py result for azure2023-02-18 15:38:43.888 +0000 processing a status message from 0045634571342376


Environment


  • Panorama
  • PAN-OS 10.2.x


Cause


  • The above condition can occur after an upgrade or if a reboot is initiated.
  • Once after a reboot, the plugins installed on the Panorama will try to get registered with the respective cloud sources.
  • Panorama with no active internet connection or connection with DNS is broken, the above validation error can be seen.


Resolution


  1. (6, 'Could not resolve host: api.gpcloudservice.com') indicates connectivity to the DNS server is broken.
  2. Ensure the Panorama has an active internet connection.
  3. Ensure the Panorama has an active connection to the DNS server (Internal or External).


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kH6TCAU&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail