GP client fails to authenticate with error "Error 128 Unknown Server Certificate"
61578
Created On 03/13/23 19:42 PM - Last Modified 03/13/23 19:44 PM
Symptom
When a GP client connects to their portal, it fails with the Unknown certificate error
The following will be observed under logs
PanGPS
--------
(P3328-T6632)Debug(1380): 03/07/23 11:29:33:037 Unable to verify server cert. Result is unable to get issuer certificate
(P3328-T6632)Debug(7811): 03/07/23 11:29:34:459 Failed to pre-login to the portal gp.testportal.com with return value 0(0).
(P3328-T6632)Debug(7898): 03/07/23 11:29:34:459 Need to send portal certificate verification message to PanGPA.
(P3208-T2580)Error(1199): 03/07/23 08:36:03:114 WinHttpSendRequest failed with error ERROR_WINHTTP_CLIENT_AUTH_CERT_NEEDED (P3252-T5400)Error(1199): 03/07/23 08:37:06:797 WinHttpSendRequest failed with error ERROR_WINHTTP_CLIENT_AUTH_CERT_NEEDED (P3252-T11408)Error(1199): 03/07/23 09:56:28:593 WinHttpSendRequest failed with error ERROR_WINHTTP_CLIENT_AUTH_CERT_NEEDED (P3260-T5220)Error(1199): 03/07/23 09:57:20:512 WinHttpSendRequest failed with error
Cause
This might be due to an incorrect push of a new set of certificates via MDM or other source.
Resolution
Remove the existing certificates on the client end and re-install the correct certificate chain