<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Gateway certificate issue on Android Globalprotect in GlobalProtect Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/globalprotect-discussions/gateway-certificate-issue-on-android-globalprotect/m-p/1262832#M7498</link>
    <description>&lt;P&gt;I've currently got a support case open for this, but I'm trying to see if other users are having the same issue.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;From what I've seen:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;6.1.11 - No issue&lt;/P&gt;
&lt;P&gt;6.1.12 - No issue&lt;/P&gt;
&lt;P&gt;6.1.13 - Issue Occurs&lt;/P&gt;
&lt;P&gt;6.1.14 - Issue Occurs (current version on Play Store)&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The issue seems to be that the client doesn't trust the certificate for the gateway.&amp;nbsp; I'm not sure if it's the same bug or not, but it sounds similar to:&lt;/P&gt;
&lt;P&gt;GPC-24228&lt;BR /&gt;Fixed an issue where Android devices running the GlobalProtect agent were unable to connect to gateways, displaying a "Could not verify the server certificate of the gateway" error. This occurred because a common code change caused the GlobalProtect agent to use the OpenSSL framework for gateway server certificate handshakes, which was unable to access certificates stored in the Android key-store.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;GPC-24228 was marked as fixed in 6.1.11, though.&amp;nbsp; The actual error I see on an Android client:&lt;/P&gt;
&lt;P&gt;"GlobalProtect failed to connect to the login server.&amp;nbsp; Contact your IT help desk to resolve the issue&lt;BR /&gt;&lt;BR /&gt;Error Details:&lt;BR /&gt;The certificate for this server was signed by an unknown certifying authority.&amp;nbsp; You might be connecting to a server that is pretending to be [insert gateway cert CN here] which could put your confidential information at risk."&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The fact that it is getting my gateway list implies it is authenticating past the portal, SSO, and MFA.&amp;nbsp; I can downgrade from 6.1.14 to 6.1.12 and connect with no errors with no config change on the firewall or client (other than the re-install).&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Anyone else seeing this?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks!&lt;/P&gt;</description>
    <pubDate>Tue, 25 Aug 2026 20:24:57 GMT</pubDate>
    <dc:creator>jsalmans</dc:creator>
    <dc:date>2026-08-25T20:24:57Z</dc:date>
    <item>
      <title>Gateway certificate issue on Android Globalprotect</title>
      <link>https://live.paloaltonetworks.com/t5/globalprotect-discussions/gateway-certificate-issue-on-android-globalprotect/m-p/1262832#M7498</link>
      <description>&lt;P&gt;I've currently got a support case open for this, but I'm trying to see if other users are having the same issue.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;From what I've seen:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;6.1.11 - No issue&lt;/P&gt;
&lt;P&gt;6.1.12 - No issue&lt;/P&gt;
&lt;P&gt;6.1.13 - Issue Occurs&lt;/P&gt;
&lt;P&gt;6.1.14 - Issue Occurs (current version on Play Store)&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The issue seems to be that the client doesn't trust the certificate for the gateway.&amp;nbsp; I'm not sure if it's the same bug or not, but it sounds similar to:&lt;/P&gt;
&lt;P&gt;GPC-24228&lt;BR /&gt;Fixed an issue where Android devices running the GlobalProtect agent were unable to connect to gateways, displaying a "Could not verify the server certificate of the gateway" error. This occurred because a common code change caused the GlobalProtect agent to use the OpenSSL framework for gateway server certificate handshakes, which was unable to access certificates stored in the Android key-store.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;GPC-24228 was marked as fixed in 6.1.11, though.&amp;nbsp; The actual error I see on an Android client:&lt;/P&gt;
&lt;P&gt;"GlobalProtect failed to connect to the login server.&amp;nbsp; Contact your IT help desk to resolve the issue&lt;BR /&gt;&lt;BR /&gt;Error Details:&lt;BR /&gt;The certificate for this server was signed by an unknown certifying authority.&amp;nbsp; You might be connecting to a server that is pretending to be [insert gateway cert CN here] which could put your confidential information at risk."&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The fact that it is getting my gateway list implies it is authenticating past the portal, SSO, and MFA.&amp;nbsp; I can downgrade from 6.1.14 to 6.1.12 and connect with no errors with no config change on the firewall or client (other than the re-install).&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Anyone else seeing this?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks!&lt;/P&gt;</description>
      <pubDate>Tue, 25 Aug 2026 20:24:57 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/globalprotect-discussions/gateway-certificate-issue-on-android-globalprotect/m-p/1262832#M7498</guid>
      <dc:creator>jsalmans</dc:creator>
      <dc:date>2026-08-25T20:24:57Z</dc:date>
    </item>
  </channel>
</rss>

