Disclaimer

Hotfix versions were inferred because the vendor did not list them explicitly: 10.1.9-h1, 10.1.9-h2, 10.1.9-h3, 10.1.9-h4, 10.1.9-h5, 10.1.9-h6, 10.1.9-h7, 10.1.9-h8, 10.1.9-h9, 10.1.9-h10, 10.1.9-h11, 10.1.9-h12, 10.1.9-h13, 10.2.4-h1, 10.2.4-h2 Known affected versions were inferred from fixed-version data and were not explicitly confirmed by the vendor: 11.0.2-h5

The earliest recollection of this bug is traced back to PAN-OS 10.1.10 - July 22, 2025. This bug is fixed in PAN-OS versions 10.2.4-h3, 11.0.3, 10.1.10, 10.1.9-h14. Fixed an issue where, when attempting to replace an existing certificate, importing a new certificate with the same name as the existing certificate failed due to mismatched public and private keys. For more information: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-10-known-and-addressed-issues/pan-os-10-1-10-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-9-known-and-addressed-issues/pan-os-10-1-9-h14-addressed-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-4-known-and-addressed-issues/pan-os-10-2-4-h3-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-release-notes/pan-os-11-0-3-known-and-addressed-issues/pan-os-11-0-3-addressed-issues