Why does the cloud services plugin show "Your account needs to be verified"?

• Why is the Cloud Services plugin for Panorama displaying a message that reads "Your account needs to be verified"?

<

• Panorama with the Cloud Services plugin

• It is expected that this message will display and require OTP verification the first time the plugin is installed and set up
• In plugin versions up to 3.1, it is also expected that re-verification is required every 90 days as described in the Prisma Access 3.1 documentation: Verify Your Account Using the One-Time Password:
  • Prisma Access requires that you re-verify your account every 90 days using the one-time password (OTP)
• In plugin version 3.2+, re-verification is no longer required every 90 days and the requirement has been removed from the Prisma Access 3.2 documentation: Verify Your Account Using the One-Time Password

• The account verification process via OTP is necessary to fetch the certificate which is used by Panorama for authentication to cloud services (Prisma Access and Cortex Data Lake)
• In plugin version 3.2+, the Panorama device certificate will be used instead of the cert that used to be fetched by the cloud services plugin. This is why the re-verification process via the plugin is no longer required every 90 days.
• There is a corner case which may occur in version 3.2+ which may result in the plugin prompting for re-verification again: Cloud services plugin v3.2+ is requiring OTP verification every 90 days when it shouldn't