IOS Global Protect APP - Required Client Certificate is not found

[acmi]

Hi l am trying to configure the IOS App with our PA 2050 and l am getting the message :

Gateway " IP Address " : Required Client certificate is not found

I have installed a 30 Day Trial license of the Gateway to test this but still the same error message..  Do l need to import a security certificate to the IOS iphone ?

Thanks Simon

[sraghunandan]

do you have client certificate configured under portal and a client certificate profile under gtwy

[HULK]

The certificate in the Global Protect Portal Configuration is the cert that the portal will give out to Clients. The Client Certificate Profile is what is telling the Global Protect that the Client Certificate is required for connection to Global Protect. Basically the Client Certificate Profile is another form of authentication to be used with or in place of the Authentication Profile. So, please verify client cert configuration under GP portal and client cert profile under the gateway.

Thanks

Subhankar

[acmi]

Under Portal l have got a client certificate configured, but under Global Protect Gateway, General,  there is no Client Certifcate option only Certificate Profile which l have configured aswell..

Anything else you want me to check or reconfigure ?

[dpalani · Accepted solution]

Hi,

Looks like the device does not have a client cert installed. Export the client cert with the private key, import it and install it on your client.

I suppose you have mentioned the Root CA correctly in the client cert profile ( The CA that was used to sign the server and client certs )

Deepak

[acmi]

Thanks importing the certificate to the phone and reconnecting has solved the problem..