GlobalProtect fails to establish VPN connection on macOS with error "CSSMERR_TP_NOT_TRUSTED" in PanGPS.log

GlobalProtect fails to establish VPN connection on macOS with error "CSSMERR_TP_NOT_TRUSTED" in PanGPS.log

4097
Created On 11/04/22 07:31 AM - Last Modified 05/17/24 20:27 PM


Symptom


  • GlobalProtect App cannot connect to the Portal or Gateway on macOS systems.
  • Error message "CSSMERR_TP_NOT_TRUSTED" in seen in the PanGPS.log.
Debug(1042): Trust evaluation properties (
        {
        error = "CSSMERR_TP_NOT_TRUSTED";
        title = "192.168.11.1";
    },
        {
        title = "GlobalProtect.com";
    }
)



 


Environment


  • GlobalProtect App
  • Supported App versions
  • macOS clients


Cause


  • Incorrect trusted CA certificate is installed.
OR
  • Trusted certificate is not present.

 


Resolution


  1. Verify if the trusted CA certificate is installed on the macOS Keychain Access.
  2. If not, install the CA certificate in the macOS Keychain Access. Refer to the appropriate macOS documentation on installing the same.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sZqKCAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail