Gateway <name> The server Certificate is invalid

Reply
Highlighted
L0 Member

Gateway <name> The server Certificate is invalid

Global Protect Connecting get the following error 

Gateway <name> The server certificate is invalid.

Highlighted
L2 Linker

We'll need a little more detail to give you any help.

 

In the meantime, take a look at this thread: https://live.paloaltonetworks.com/t5/general-topics/globalprotect-the-server-certificate-is-invalid/...

 

--Matthew

Highlighted
L4 Transporter

  1. Check to see which certificate profile is listed under Templates > Network > GlobalProtect > Gateways > your-gateway > Authentication > Server Authentication
  2. Find this profile under Templates > Device > Certificate Management > SSL/TLS Service Profile and take note of which certificate is used.
  3. Find this certificate under Templates > Device > Certificate Management > Certificates
    1. Check that CN of the subject matches the gateway address specified in the portal configuration under Templates > Network > GlobalProtect > Portals > your-portal > Agent > your-agent-config > External (or Internal) > External Gateways
    2. Check that today's date does not fall outside the Not Valid Before/After dates (also check that system time on the GP client machine is correct.

If everything looks good, try exporting your logs from the GlobalProtect client, and looking at PanGPS.log for clues.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!