Palo Alto Failed To Fetch Device Certificate Tpm Public Key Match Failed Updated Exclusive

"Failed to fetch device certificate: TPM public key match failed"

  1. Generate a new CSR on device (or trigger SCEP/RA enrollment) so new keypair is created and stored.
  2. Approve and issue a new certificate on the CA/management side that matches the new public key.
  3. Install the certificate on the device.

Chapter 4: The Aftermath

The red blinking light on the dashboard turned green. The tunnel to Panorama re-established. "Failed to fetch device certificate: TPM public key

  • If TPM key lost or irrecoverable