Problems with pre-logon with machine certificate

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Problems with pre-logon with machine certificate

L1 Bithead

Hi!

 

We have problems with a customer that uses GP and pre-logon with machine certificate.

 

It works for a couple of days, GP connects when you start your computer and works as intended.

But stops working after a while.

 

I can see these entries in the logs, the application seems to have som problems with the machine certificate:

 

P13676-T14592)Info (3434): 10/11/23 13:47:35:791 PanWinhttpCallback(dwInternetStatus=WINHTTP_CALLBACK_STATUS_REQUEST_ERROR, this=000001A70A806DC0)
(P13676-T14592)Debug(3507): 10/11/23 13:47:35:791 WINHTTP_CALLBACK_STATUS_REQUEST_ERROR, error=12044, result=5, dwCertificateError=0
(P13676-T17060)Info (2260): 10/11/23 13:47:35:885 winhttpObj, get WINHTTP_CALLBACK_STATUS_REQUEST_ERROR
(P13676-T17060)Info (1649): 10/11/23 13:47:35:885 Server cert query failed with error 12019
(P13676-T17060)Debug(1561): 10/11/23 13:47:35:885 DC, dump server certificate now
(P13676-T17060)Error(1631): 10/11/23 13:47:35:885 failed to open the file C:\Users\user\AppData\Local\Palo Alto Networks\GlobalProtect\ServerCert.pan for reading.
(P13676-T17060)Error(2290): 10/11/23 13:47:35:885 error = ERROR_WINHTTP_CLIENT_AUTH_CERT_NEEDED

 

Does anyone have any suggestions how to solve this?

1 accepted solution

Accepted Solutions

L1 Bithead

The problem was that the "Subject" field in the Machine certificate was empty.

View solution in original post

1 REPLY 1

L1 Bithead

The problem was that the "Subject" field in the Machine certificate was empty.

  • 1 accepted solution
  • 1075 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!