01-29-2023 08:31 PM
Dear Team,
I need a GlobalProtect certificate for IOS.
The following error was confirmed in GP.log, and we solved the problem by installing it manually.
However, we want to make the certificate automatically installed on IOS as well.
In the current setup, Windows or Android will automatically install the certificate.
I checked the gp log and it seems to be happening when the certificate security requirements required by Apple are not met.
Has anyone created the certificate required by Apple? If so, I would like to receive a certificate file for my reference.
GP.Log
P9180-T16899 01/16/2023 16:20:16:916 Debug(1042): Trust evaluation properties (
{
type = error;
value = "Root certificate is not trusted.";
},
{
type = error;
value = "Hostname mismatch.";
},
{
type = error;
value = "Policy requirements not met.";
P9180-T20995 01/16/2023 16:20:17:005 Error( 667): Server trust evalutaion failed: 5
P9180-T259 01/16/2023 16:20:51:424 Debug(9777): Skip importing trusted root CA to store because portal's server certificate is not verified
GLOBAL PROTECT DOESN'T CONNECT IN IOS 13 AND MACOS 10.15 DUE TO" SERVER CERTIFICATE VERIFICATION FAILED"
: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HB5rCAG
SSL CERTIFICATE FOR IOS DEVICES
: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClezCAC
If anyone knows about it, please share with me.
Thanks in advance,
Kyungjun,
