topic Re: Failed to Validate Client Certificate" Error with User ID Agent in Next-Generation Firewall Discussions

Failed to Validate Client Certificate" Error with User ID Agent

Jagdeep1 — Fri, 23 Aug 2024 17:03:06 GMT

Hi Community,

We’re encountering an issue with our Windows-based User ID Agent installed on the server. Specifically, we're receiving the error message: "Failed to validate client certificate: No connection found."

Here’s what we’ve tried so far to resolve the issue:

Verified Certificate Locations:
- Checked Device > User Identification > Connection Security and confirmed there is no certificate present.
- Verified that no certificate exists in the User ID Agent itself.
- Reviewed the User-ID agent configuration file and found no certificates there.
Troubleshooting Steps Taken:
- Attempted to upgrade the User ID Agent.
- Reinstalled the User ID Agent.

Despite these efforts, the issue persists. We’re looking for any additional suggestions or insights from the community that might help us resolve this problem.

If anyone has encountered a similar issue or has ideas on what we might have missed, your advice would be greatly appreciated!

Thank you in advance for your help.

What certificate it might be referring to ? any ideas ?

Re: Failed to Validate Client Certificate" Error with User ID Agent

CJP-PALOALTO — Mon, 26 Aug 2024 09:54:29 GMT

Hello,

Same issue here, we had to add ans delete certificate for User-ID feature.

Then it reworks.

https://live.paloaltonetworks.com/t5/general-topics/user-id-connection-security-won-t-work/td-p/352137

Re: Failed to Validate Client Certificate" Error with User ID Agent

KhaleelE — Tue, 15 Oct 2024 13:14:41 GMT

After upgrading to 10.1.12 User id agent we are seeing this error previously we never used certificate on the user id agent. Is there any way without installing the ssl certificate on user id agent and FIrewall?

Re: Failed to Validate Client Certificate" Error with User ID Agent

AdrianBriggs — Mon, 11 Nov 2024 09:07:11 GMT

Hi, I am wondering if your firewall needs an update. There are issues relating to the embedded certificate expiry as detailed in this knowledge base article:-

After upgrade of User-id agent, the firewall gets disconnected ... - Knowledge Base - Palo Alto Networks

Re: Failed to Validate Client Certificate" Error with User ID Agent

CJP-PALOALTO — Tue, 12 Nov 2024 08:40:52 GMT

Hello,

Finally I've found another workaround that is more simple : "just" uncheck "Enabled" and then re-check "Enabled" under "Data Redistribution / Agent".

Regards,

Re: Failed to Validate Client Certificate" Error with User ID Agent

CristianMofU — Tue, 19 Nov 2024 18:15:07 GMT

My firewall version is up to date (according to directives regarding the User-ID certificate issue) and I installed version 11.0.1-104 of the Agent, which was supposed to resolve the situation. However, I still encountered an invalid certificate error when starting the Agent.

I even created a custom certificate, set up a certificate profile to assign to User-ID on the firewall, and then imported the certificate into the Agent, but it didn’t work.

The issue was only resolved with your tip to uncheck "Enabled", commit, check "Enabled" again, and commit once more. (At this point, I had already given up on trying to use a custom certificate.)

Thank you very much! 😊

Re: Failed to Validate Client Certificate" Error with User ID Agent

David_Jipp — Fri, 13 Dec 2024 21:40:59 GMT

This resolved my issue as well- thanks!

Re: Failed to Validate Client Certificate" Error with User ID Agent

CJP-PALOALTO — Mon, 16 Dec 2024 08:21:35 GMT

Hi all,

To Palo Alto support : this issue has been encountered this morning again following weekly reboot of our server which houses User-ID agent.

Same workaround as described. But is a fix for that be scheduled ?

Regards,

Re: Failed to Validate Client Certificate" Error with User ID Agent

Rdesjardins — Thu, 13 Feb 2025 07:43:59 GMT

Hello,

Same for us, it's the second time the problem occurs and we fix it by selecting a certificate on the suer-id agent profile then “commit” then we remove it and commit.

Re: Failed to Validate Client Certificate" Error with User ID Agent

manuellara — Mon, 09 Jun 2025 22:51:05 GMT

I confirm, The issue was only resolved with your tip to uncheck "Enabled", commit, check "Enabled" again, and commit once more.