Status: investigating

Status: Investigating

Severity: Degraded

Locations: Eemshaven, London, Singapore, Sydney, Tokyo

Impact:

As part of ongoing infrastructure maintenance, the client certificate used by the Strata Logging Service Log Forwarding service has been renewed across the JP, EU, UK, AU, and SG regions. During this update, some customers using mutual TLS (mTLS) authentication may have experienced temporary interruptions in HTTPS log forwarding. The renewal is now complete in all affected regions.

Intermediate CA Change: The renewed certificate is now issued by a new GoDaddy CA

Intermediate CA: Previous: GoDaddy Secure Certificate Authority - G2; New: GoDaddy TLS Intermediate CA DV - R1v1. This is a GoDaddy-initiated change aligned with updated industry standards.

Customer Action Required: If your receiving server validates the client certificate against a specific Intermediate CA, you need to: Install the new Intermediate CA certificate (GoDaddy TLS Intermediate CA DV - R1v1) in your server's trust store. Customers whose trust configuration uses the GoDaddy root certificate (rather than a specific intermediate) should not be affected.

To download the new CA, visit https://certs.godaddy.com/repository/gdtlsissuing_dv-r1v1.crt.pem

If you continue to experience issues after updating your trust store, please contact Palo Alto Networks Support.

Workaround:

Customer Advisory for SLS Log-Forwarding