topic Re: VPN Global Protect certificate error in General Topics

VPN Global Protect certificate error

ITBT — Mon, 16 Nov 2015 12:17:34 GMT

Hello,

I have a big problem with self signed certificate in my PAN. I use GP 2.3.0 version.

I install two certificates in two computers. One of them are connect to the VPN correctly but other display window with "Server Certificate Error" Error detailed "The server address certificate is not signed by a trusted certificate authority." I can choose "Show Certificate", "Continue", "Cancel"

And in the status tap is

"you are not authorized to connect to globalprotect portal"

Someone have similar problem?

Re: VPN Global Protect certificate error

Raido_Rattameister — Mon, 16 Nov 2015 14:39:21 GMT

Are both client using same client version?

New GP version requires cert to be trusted.

Go to firewall.

Export CA certificate from Palo you signed GP cert with (only public key, NOT PRIVATE).

Install it to Trusted Root Certificate Store on laptop.

Re: VPN Global Protect certificate error

pankaku — Sat, 21 Nov 2015 11:46:01 GMT

Have you configured portal with specific user/group under the client configuration of the portal. If yes that might the issue for you are not authorized to connect to portal.

For the other issue check the following discussion:

https://live.paloaltonetworks.com/t5/General-Topics/PAN-OS-and-Global-Protect-software/m-p/65616#M39150

Re: VPN Global Protect certificate error

smd — Tue, 16 Dec 2025 22:24:09 GMT

Gone through same issue, it was showing Certificate is not signed by a trusted certificate authority. Problem was not that in real, changed interface address recently when i connected to GP earlier it was for other interface address. In chrome install GP with new Gateway address before that uninstall Earlier GP, then try to connect with new Default GW of Interface of PC for GP
Check with the certificates also, not to sign Server Certificate by CA, do it with Intermediate Certificate.
and sign by forward trust in both Root Cert and Intermediate Cert.