Palo Alto Networks | PAN-189106

The earliest recollection of this bug is traced back to PAN-OS 10.2.0 - May 16, 2024. This bug is fixed in PAN-OS versions 10.2.1. Fixed an issue on Panorama where you were unable to successfully downgrade to a PAN-OS 10.1 release unless you uninstalled the ZTP Plugin 2.0. On the Panorama management server, you must uninstall the ZTP Plugin 2.0 before you can successfully downgrade to PAN-OS 10.1. After successful downgrade, you must reinstall the latest ZTP Plugin 1.0 version. Workaround: Before you downgrade Panorama to PAN-OS 10.1, uninstall ZTP Plugin 2.0. After you successfully downgrade Panorama to PAN-OS 10.1, re-install ZTP Plugin 1.0 and re-enable ZTP functionality. Log in to the Panorama web interface . Uninstall the ZTP Plugin . Downgrade Panorama to PAN-OS 10.1. Log in to the Panorama web interface . Install the ZTP plugin . Select Panorama Zero Touch Provisioning and check (enable) ZTP . For more information: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-0-known-and-addressed-issues/pan-os-10-2-0-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-1-known-and-addressed-issues/pan-os-10-2-1-addressed-issues