Known Issues in the Zero Touch Provisioning 1.0.0 Release

PLUG-4937

The Customer Support Portal (CSP) allows you to register up to two Panorama management servers that are not in a high availability (HA) configuration with the ZTP service on your CSP account and allows you to register a ZTP firewall with both Panoramas, resulting in duplicate registration.
Workaround:
Ensure that a single Panorama, or two Panorama in an HA configuration, are associated with the ZTP service on your CSP account.

PLUG-4978

On the Panorama management server, when you import (
Panorama
Zero Touch Provisioning
Firewall Registration
) a CSV with no serial numbers or claim keys, or import a CSV with special characters, Panorama erroneously displays the import as successful.

PAN-160870

On a Zero Touch Provisioning (ZTP) capable firewall with ZTP disabled, the default ZTP configuration that allows on-boarded firewalls to connect to the Panorama management server is still present and causes commit failures.
Workaround:
Log in to the firewall CLI to enable and then disable the template and shared policy configurations.
  1. Enable and then disable the template configuration.
    admin>
    set system setting template enable
    admin>
    set system setting template disable
  2. Enable and then disable the Panorama shared policy configuration.
    admin>
    set system setting shared-policy enable
    admin>
    set system setting shared-policy enable
  3. Commit to disable ZTP.
    admin>
    configure
    admin#
    commit force

Recommended For You