topic Gateway <name> The server Certificate is invalid in General Topics

Gateway The server Certificate is invalid

girishp — Wed, 21 Oct 2020 14:54:22 GMT

Global Protect Connecting get the following error

Gateway <name> The server certificate is invalid.

MatthewSabin — Wed, 21 Oct 2020 15:20:59 GMT

We'll need a little more detail to give you any help.

--Matthew

OwenFuller — Wed, 21 Oct 2020 18:31:37 GMT

Check to see which certificate profile is listed under Templates > Network > GlobalProtect > Gateways > your-gateway > Authentication > Server Authentication
Find this profile under Templates > Device > Certificate Management > SSL/TLS Service Profile and take note of which certificate is used.
Find this certificate under Templates > Device > Certificate Management > Certificates
1. Check that CN of the subject matches the gateway address specified in the portal configuration under Templates > Network > GlobalProtect > Portals > your-portal > Agent > your-agent-config > External (or Internal) > External Gateways
2. Check that today's date does not fall outside the Not Valid Before/After dates (also check that system time on the GP client machine is correct.

If everything looks good, try exporting your logs from the GlobalProtect client, and looking at PanGPS.log for clues.