GlobalProtect fails to establish VPN connection on macOS with error "CSSMERR_TP_NOT_TRUSTED" in PanGPS.log
4097
Created On 11/04/22 07:31 AM - Last Modified 05/17/24 20:27 PM
Symptom
- GlobalProtect App cannot connect to the Portal or Gateway on macOS systems.
- Error message "CSSMERR_TP_NOT_TRUSTED" in seen in the PanGPS.log.
Debug(1042): Trust evaluation properties (
{
error = "CSSMERR_TP_NOT_TRUSTED";
title = "192.168.11.1";
},
{
title = "GlobalProtect.com";
}
)
Environment
- GlobalProtect App
- Supported App versions
- macOS clients
Cause
- Incorrect trusted CA certificate is installed.
OR
- Trusted certificate is not present.
Resolution
- Verify if the trusted CA certificate is installed on the macOS Keychain Access.
- If not, install the CA certificate in the macOS Keychain Access. Refer to the appropriate macOS documentation on installing the same.