Error in Third Party Certificate

Problem

An error in the Third Party Certificate configuration can cause issues with the MDM server and the Secure Gateway installation. Common symptoms include server startup failures and certificates not being reflected in the MDM Server after configuration.

Cause

The primary causes of this error are:

1. Improper Intermediate Chain Configuration: The intermediate certificate chain may not be configured correctly.
2. Server Issues Post Configuration: The server may not start after configuring the Third Party certificate, or the certificate might not be reflected in the MDM Server even after a restart.

Resolution

1. Identify the Certificate Error:
   1. Open the server URL (https://nat_address:port_number) in a browser to view the specific certificate error.
   2. Ensure that the intermediate chain is configured properly.
2. Configure Intermediate Certificate Properly:
   1. Navigate to the Admin Console: Go to Admin -> Import SSL certificate in your MDM console.
   2. Upload Vendor-Signed Certificates: Follow the prompts to upload the vendor-signed certificates.
   3. Intermediate Certificate Configuration: If prompted, choose Automatic to detect the intermediate certificate automatically, or Manual to upload it manually.
3. Secure Gateway Configuration:
   1. If Secure Gateway is configured, copy the newly configured certificate from the MDM server to the Secure Gateway configuration.
   2. Ensure that the certificate is accessible in the installation directory with read and write permissions.
4. Check Certificate Permissions:
   1. Verify that the certificate file has the necessary read and write permissions in the installation directory.

For more detailed guidance on secure communication using third-party certificates, refer Secure communication using 3rd party certificate.

If the problem still persists, contact mdm-support@manageengine.com (MDM On-Premises) or mdmcloud-support@manageengine.com (MDM Cloud)