Palo Alto Failed To — Fetch Device Certificate Tpm Public Key Match Failed [better]

state is out of sync with the cloud-based Certificate Service

Open a high-priority tech support case and attach the output of these diagnostic commands: state is out of sync with the cloud-based

The OTP generated in the CSP is time-based. If the firewall's system time isn't synchronized with an authoritative NTP server, the OTP validation will fail. Other issues like a disconnected appliance, revoked CSP credentials, or a flawed OTP generation process can also cause problems. revoked CSP credentials