Fortigates out of sync after upgrade - certificate.ca

[Badger_89]

Hi

I have upgraded a cluster (which isn't in production yet) to 7.2.8. Both firewalls are now on 7.2.8 but sync is failing due to a mismatch in certificate.ca

running diagnose sys ha checksum show global certificate.ca on both reveals a few differences in the hashes

for example 

Atos_TrustedRoot_Root_CA_ECC_TLS_2021

CommScope_Public_Trust_ECC_Root-01

Most are the same there's about 10 that are not

was wondering the best way to resolve this 

thanks

[Richie_C · Accepted solution]

I recently had a similar issue. Rebooting the secondary device fixed it for me.

Thanks

[Badger_89]

so earlier I had rebooted both at similar time and it didn't help, but just did the secondary only and it has worked, thanks for the help