VPN certificate error, Android versions

jchciazacarrion — Mon, 11 Mar 2024 15:44:59 GMT

Please, I have a problem with the connection through GlobalProtect VPN, for cell phones or tablets with Android version 12 and 13, the error is the following:
"There is a problem with the security certificate. The identity xxxx.xxxx.xxxx.xxxx cannot be verified. The portal certificate is not signed by a trusted certificate authority."

With other versions of Android 8, 9, 10 it works, maybe you know what causes this error?

Re: VPN certificate error, Android versions

kiwi — Fri, 15 Mar 2024 11:19:01 GMT

Hi @jchciazacarrion ,

Please check the GP logs for more details but based on the error message it sounds like the intermediate certificate is missing from the trusted certificate authority store on the android device.

Make sure the intermediate certificate is imported to the firewall.

On the Portal > Agent > Trusted Root CA > Add > Add the Intermediate certificate (check the "Install in Local Root Certificate Store) This way when devices connect to the portal for the first time, this intermediate certificate will be pushed to the trusted certificate store.

Also make sure to check the compatibility matrix to make sure it's not something as simple as an incompatibility:

https://docs.paloaltonetworks.com/compatibility-matrix/globalprotect/where-can-i-install-the-globalprotect-app

Kind regards,

-Kim.

topic Re: VPN certificate error, Android versions in GlobalProtect Discussions

VPN certificate error, Android versions

Re: VPN certificate error, Android versions