Every firewall and Panorama management server
has a default master key that encrypts all the private keys and
passwords in the configuration to secure them (such as the private
key used for SSL Forward Proxy Decryption).
If a high availability
(HA) configuration, you must use the same master key on both firewalls
or Panorama in the pair. Otherwise, HA synchronization will not
Additionally, if you are using Panorama to
manage your firewalls, you must use the same master key on Panorama
and all managed firewalls so that Panorama can push configurations
to the firewalls.