This article talks about EX3400 which is missing critical files, including the entire directory causing cert enrollment to fail on the Junos EX3400 platform

Cert enrollments failing on EX3400s giving error of PKI operations not supported on JUNOS Limited Version.

Example:

Working:

EX3400-1> show security pki ?

Possible completions:

Hostname: EX3400-1

Model: ex3400-48t

Junos: 21.2R3-S6.11

Non-Working:

EX3400-2> show security pk?

error: syntax error, expecting <command>: pk

No valid completions

PKI operations not supported on JUNOS Limited Version.

Hostname: EX3400-2

Model: ex3400-48t

Junos: 21.2R3-S6.11

Root cause analysis for the cert enrollments to fail:-

1.The PKID component uses the internal API junos_edition_check() to determine OS mode.

2.This API checks for the presence of package.xml. If missing, it defaults to "limited mode", disabling PKI operations.

3.Lab tests confirmed that removing package.xml on a working device triggers the same error:

"PKI operations are not supported on JUNOS Limited Version."

Possible Reasons for the package.xml file to go missing:-

1. File system corruption due to power cycle.
2. Manual deletion to free up space.

Solution to resolve the issue:-

Engineering strongly recommends performing the intermediate OS package installation as a best practice.

Intermediate OS Package Installation (Optional but Recommended)

1. Install the OS Package File
2. Refer to the Juniper Support Article:
3. OS Package Recommendation on all JUNOS BSDx Platforms
4. Select the “For 18.X and Later” section and install the appropriate OS package.
5. Re-install Junos OS

This ensures that all required components (e.g., packages.xml ) are properly restored.