VPN certificate error, Android versions

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

VPN certificate error, Android versions

L0 Member

Please, I have a problem with the connection through GlobalProtect VPN, for cell phones or tablets with Android version 12 and 13, the error is the following:
"There is a problem with the security certificate. The identity xxxx.xxxx.xxxx.xxxx cannot be verified. The portal certificate is not signed by a trusted certificate authority."

With other versions of Android 8, 9, 10 it works, maybe you know what causes this error?

1 REPLY 1

Community Team Member

Hi @jchciazacarrion ,

 

Please check the GP logs for more details but based on the error message it sounds like the intermediate certificate is missing from the trusted certificate authority store on the android device. 

 

Make sure the intermediate certificate is imported to the firewall.

On the Portal > Agent > Trusted Root CA > Add > Add the Intermediate certificate (check the "Install in Local Root Certificate Store) This way when devices connect to the portal for the first time, this intermediate certificate will be pushed to the trusted certificate store.

 

Also make sure to check the compatibility matrix to make sure it's not something as simple as an incompatibility:

https://docs.paloaltonetworks.com/compatibility-matrix/globalprotect/where-can-i-install-the-globalp...

 

Kind regards,

-Kim.

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.
  • 367 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!