<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Server Certificate Error in GlobalProtect Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/globalprotect-discussions/server-certificate-error/m-p/513028#M3107</link>
    <description>&lt;BLOCKQUOTE&gt;&lt;SPAN&gt;VPN I have the setting for Username/Password OR Certificate.&lt;/SPAN&gt;&lt;/BLOCKQUOTE&gt;
&lt;P&gt;&lt;SPAN&gt;This setting is for setting the client authentication behaviour and not related to the error you are getting.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;That error means you don't have the Root CA trusted for whichever cert you are using for GP.&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 25 Aug 2022 18:06:10 GMT</pubDate>
    <dc:creator>dmifsud</dc:creator>
    <dc:date>2022-08-25T18:06:10Z</dc:date>
    <item>
      <title>Server Certificate Error</title>
      <link>https://live.paloaltonetworks.com/t5/globalprotect-discussions/server-certificate-error/m-p/512385#M3090</link>
      <description>&lt;P&gt;I was able to connect a few weeks prior to this error by uninstalling and reinstalling the GlobalProtect client.&amp;nbsp; However this is no longer working.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I'm getting the Server Certificate Error popup:&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="PaloAltoVPNError.png" style="width: 473px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/43223iA69169AF1D8AD295/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="PaloAltoVPNError.png" alt="PaloAltoVPNError.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I checked Device/Certificate Management/Certificates and all my certificates have Status of valid.&amp;nbsp; For VPN I have the setting for Username/Password OR Certificate.&amp;nbsp; So not sure why I'm getting this error.&lt;/P&gt;</description>
      <pubDate>Fri, 19 Aug 2022 16:22:33 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/globalprotect-discussions/server-certificate-error/m-p/512385#M3090</guid>
      <dc:creator>${userLoginName}</dc:creator>
      <dc:date>2022-08-19T16:22:33Z</dc:date>
    </item>
    <item>
      <title>Re: Server Certificate Error</title>
      <link>https://live.paloaltonetworks.com/t5/globalprotect-discussions/server-certificate-error/m-p/512737#M3102</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/203600"&gt;@${userLoginName}&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;The status of a certificate will show valid as long as it isn't expired. It doesn't mean that the device is actually going to trust said certificate. I'd validate that the client in question actually trusts the certificate that you are using, and that if it's a self-signed certificate you still have it imported on the client in question.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 23 Aug 2022 19:45:46 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/globalprotect-discussions/server-certificate-error/m-p/512737#M3102</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2022-08-23T19:45:46Z</dc:date>
    </item>
    <item>
      <title>Re: Server Certificate Error</title>
      <link>https://live.paloaltonetworks.com/t5/globalprotect-discussions/server-certificate-error/m-p/513028#M3107</link>
      <description>&lt;BLOCKQUOTE&gt;&lt;SPAN&gt;VPN I have the setting for Username/Password OR Certificate.&lt;/SPAN&gt;&lt;/BLOCKQUOTE&gt;
&lt;P&gt;&lt;SPAN&gt;This setting is for setting the client authentication behaviour and not related to the error you are getting.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;That error means you don't have the Root CA trusted for whichever cert you are using for GP.&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 25 Aug 2022 18:06:10 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/globalprotect-discussions/server-certificate-error/m-p/513028#M3107</guid>
      <dc:creator>dmifsud</dc:creator>
      <dc:date>2022-08-25T18:06:10Z</dc:date>
    </item>
  </channel>
</rss>

