VPN certificate error, Android versions

[jchciazacarrion]

Please, I have a problem with the connection through GlobalProtect VPN, for cell phones or tablets with Android version 12 and 13, the error is the following:
"There is a problem with the security certificate. The identity xxxx.xxxx.xxxx.xxxx cannot be verified. The portal certificate is not signed by a trusted certificate authority."

With other versions of Android 8, 9, 10 it works, maybe you know what causes this error?

[kiwi]

Hi @jchciazacarrion ,

Please check the GP logs for more details but based on the error message it sounds like the intermediate certificate is missing from the trusted certificate authority store on the android device. 

Make sure the intermediate certificate is imported to the firewall.

On the Portal > Agent > Trusted Root CA > Add > Add the Intermediate certificate (check the "Install in Local Root Certificate Store) This way when devices connect to the portal for the first time, this intermediate certificate will be pushed to the trusted certificate store.

Also make sure to check the compatibility matrix to make sure it's not something as simple as an incompatibility:

https://docs.paloaltonetworks.com/compatibility-matrix/globalprotect/where-can-i-install-the-globalp...

Kind regards,

-Kim.