topic Re: Unrusted Cert Warning on IE in General Topics

Unrusted Cert Warning on IE

MP18 — Tue, 28 May 2019 05:08:54 GMT

We have created SSL cert for the PA web gui from our internal CA.

When we access PA web gui via Chrome it is good.

When I use IE it get the cert untrusted cert warning message?

How can i fix this ?

Re: Unrusted Cert Warning on IE

kiwi — Tue, 28 May 2019 08:28:41 GMT

Hi @MP18 ,

If you haven't done so already, try installing the certificate in the trusted root certification authorities store in IE.

Hope this helps,

-Kiwi.

Re: Unrusted Cert Warning on IE

MP18 — Tue, 28 May 2019 17:07:41 GMT

yes cert is in the Root.

when i click on cert error it shows

mismatched address

On Google Chrome we have no issues

Re: Unrusted Cert Warning on IE

OtakarKlier — Tue, 28 May 2019 18:51:11 GMT

Hello,

Does the cert name match what the DNS IP of the interface is? What we have found is that not only does the cert name need a DNS entry, it also needs SAN entries with the IP address and any other names you have specified.

Regards,

Re: Unrusted Cert Warning on IE

MP18 — Tue, 28 May 2019 23:22:44 GMT

All the DNS name and host name matches.

We have more than 20 PA all have same issue with IE they work fine with Google chrome.

We use Management Interface of PA for GUI access.

Re: Unrusted Cert Warning on IE

OtakarKlier — Fri, 31 May 2019 14:14:08 GMT

Hello,

I would say a call to support might be in order. Seems like something is not 100%.

Regards,

Re: Unrusted Cert Warning on IE

MP18 — Fri, 31 May 2019 14:21:50 GMT

will do now

Re: Unrusted Cert Warning on IE

jeremy.larsen — Mon, 03 Jun 2019 14:18:35 GMT

Try not tying your cert to an ip address. It's really unecessary and will cause you pain eventually. This will probably fix your IE issues as well.