Certificate Error in Global Protect Portal

[smithkopel]

Hi All,

I'm trying to setup the Globalprotect VPN and have followed the (only partially helpful) GlobalProtect-Configuration-4.1.pdf to create certs and set everything up. When I try to connect to the portal site with my browser I get a certificate error - "Error code: sec_error_bad_signature".

It doesn't matter if I conect to the host name or the IP that I defined in the cert, I still get this error.

Does anyone know what the problem could be. Also, is there a way to actually see the certificates?

Thanks,

Kenton

[LCMember380]

Following these changes sorted the issue for me. Thanks.

[SistemasCajamar]

Hello

I'm trying to use a certificate from our Corporate CA (Windows 2003) with GlobalConnect Gateway and Portal

I've loaded the certificate, the private key  and the root certificate. I've marked the root certifcate as Trusted Root CA.

I've configured the gateway with the server certificate, but I get this error:

What kind of certificate should I issue ?

[Chris.Perez]

SistemasCajamar - Your MS PKI certificate template may not have the proper attributes set, such as client authentication, or IPSec.

[acmi]

Hi Kanish,

I followed your examples for creating certificates for Global Protect..  But for some reason the portal or connecting via the Global Protect Client do not work..  The Portal just times out and client doesn't produce any errors or authentication window..

It only seems to work when l use the "web-server" local host device certificate within the Firewall..  But l don't want to use this as it is generating CN Host mismatch errors from the Global Protect Client..

We are using PAN OS " 5.0.3  and Global Protect Client 1.2.4

Thanks any help would be appreciated..

SG