Unable to Commit Changes after Installing New Certificate

DJ_1924 — Fri, 04 Sep 2026 13:45:43 GMT

I was asked to assist with a new wildcard certificate that was uploaded to the firewall yesterday, update the SSL/TLS Service Profile and confirmed settings for GP. Commit failed so began reviewing configuration. The 2 reasons listed for the failure were:

client useridd phase 1 failure
client gp_broker phase 1 failure

Double checking and the wildcard certificate was set active for the Authentication Override between the GP Portal and Gateway; reverted to the old certificate and the that error cleared.

While looking into the other commit error was for found that the SSL/TLS profile had been used in the user-id settings for the server monitor section.

I was able to create a new SSL/TLS profile using the new correct certificate and confirmed that is now working for the GP login page, but would like to get the other 2 errors corrected so I can remove the expired certificates.

What I did notice is that if I select TLS 1.3 as the maximum version for in the SSL/TLS profile, the new profile isn't listed as an option in the User-ID Syslog Service Profile drop down.

Both old and new certificates are from the same CA. The only real difference I see between the 2 certificates is that the old certificate had the following SANs:

*.mydomain.org

mydomain.org

While the new only has *.mydomain.org.

topic Unable to Commit Changes after Installing New Certificate in General Topics

Unable to Commit Changes after Installing New Certificate