Commit fails with Error: Can't update or add Cloud Identity Engine profiles because the device certificate is either not configured or not valid

Commit fails with Error: Can't update or add Cloud Identity Engine profiles because the device certificate is either not configured or not valid

2992

Created On 01/06/25 22:14 PM - Last Modified 08/11/25 21:40 PM

Cloud Identity Agent

Certification

11.1

PAN-OS

Symptom

When configuring or updating Cloud Identity Engine profile, the commit fails with the error message:

Error: Can't update or add Cloud Identity Engine profiles because the device certificate is either not configured or not valid(Module: useridd)
client useridd phase 1 failure
Commit failed
[edit]

Environment

Palo Alto Firewalls or Panorama
Supported PAN-OS
Cloud Identity Engine profiles.

Cause

When configuring or modifying Cloud Identity Engine profiles, Device certificate is required which is not configured..

Resolution

Configure the Device Certificate. Refer Install a Device Certificate.
Once configured, the commit should work fine.