Gateway <name> The server Certificate is invalid

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Gateway <name> The server Certificate is invalid

L0 Member

Global Protect Connecting get the following error 

Gateway <name> The server certificate is invalid.

2 REPLIES 2

L2 Linker

We'll need a little more detail to give you any help.

 

In the meantime, take a look at this thread: https://live.paloaltonetworks.com/t5/general-topics/globalprotect-the-server-certificate-is-invalid/...

 

--Matthew

L4 Transporter
  1. Check to see which certificate profile is listed under Templates > Network > GlobalProtect > Gateways > your-gateway > Authentication > Server Authentication
  2. Find this profile under Templates > Device > Certificate Management > SSL/TLS Service Profile and take note of which certificate is used.
  3. Find this certificate under Templates > Device > Certificate Management > Certificates
    1. Check that CN of the subject matches the gateway address specified in the portal configuration under Templates > Network > GlobalProtect > Portals > your-portal > Agent > your-agent-config > External (or Internal) > External Gateways
    2. Check that today's date does not fall outside the Not Valid Before/After dates (also check that system time on the GP client machine is correct.

If everything looks good, try exporting your logs from the GlobalProtect client, and looking at PanGPS.log for clues.

  • 4669 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!