VPN Global Protect certificate error

[ITBT]

Hello,

I have a big problem with self signed certificate in my PAN. I use GP 2.3.0 version.

I install two certificates in two computers. One of them are connect to the VPN correctly but other display window with "Server Certificate Error" Error detailed "The server address certificate is not signed by a trusted certificate authority." I can choose "Show Certificate", "Continue", "Cancel"

And in the status tap is 

"you are not authorized to connect to globalprotect portal"

Someone have similar problem?

[Raido_Rattameister]

Are both client using same client version?

New GP version requires cert to be trusted.

Go to firewall.

Export CA certificate from Palo you signed GP cert with (only public key, NOT PRIVATE).

Install it to Trusted Root Certificate Store on laptop.

[pankaku]

Have you configured portal with specific user/group under the client configuration of the portal. If yes that might the issue for you are not authorized to connect to portal.

For the other issue check the following discussion:

https://live.paloaltonetworks.com/t5/General-Topics/PAN-OS-and-Global-Protect-software/m-p/65616#M39...

[smd]

Gone through same issue, it was showing Certificate is not signed by a trusted certificate authority. Problem was not that in real, changed interface address recently when i connected to GP earlier it was for other interface address. In chrome install GP with new Gateway address before that uninstall Earlier GP, then try to connect with new Default GW of Interface of PC for GP
Check with the certificates also, not to sign Server Certificate by CA, do it with Intermediate Certificate.
and sign by forward trust in both Root Cert and Intermediate Cert.