cancel
Showing results for 
Search instead for 
Did you mean: 

A valid Root CA Certificate could not be located

rafa
Occasional Contributor

A valid Root CA Certificate could not be located

Hi,

 

I am facing some problems with the pulse secure Device Certificates.

 

My cert has +3 levels of certification til root cert, and I fear that Pulse can't manage this.

 

I have succesfully imported the cert and all the intermediate chain in both directions without success.

 

Is there any way to solve this?

 

Thank you

 

AAA Certificate Services
Identity: AAA Certificate Services
Verified by: AAA Certificate Services
Expires: 31/12/28

 

USERTrust RSA Certification Authority
Identity: USERTrust RSA Certification Authority
Verified by: AAA Certificate Services
Expires: 31/12/28

 

GEANT OV RSA CA 4
Identity: GEANT OV RSA CA 4
Verified by: USERTrust RSA Certification Authority
Expires: 01/05/33

 

4 REPLIES 4
kita
Regular Contributor

Re: A valid Root CA Certificate could not be located

Hello Raf,

 

This should be fine.  You'll want to install the intermediate ca on the PCS device using the following steps:

 

https://docs.pulsesecure.net/WebHelp/PCS/8.3R1/Home.htm#PCS/PCS_AdminGuide_8.3/Importing_Intermediat...

 

Also, you can use a third-party site to check if the CA chain is proper after the installation using:

 

https://www.ssllabs.com/ssltest/

rafa
Occasional Contributor

Re: A valid Root CA Certificate could not be located

Hello Kita,

 

Yes, they are installed. ¿?¿?¿?

 

Thank you

Rafa

r@yElr3y
Moderator

Re: A valid Root CA Certificate could not be located

@rafa Do we see any errors in the cert chain that was reported by the SSL certificate checker tool?

PCS Expert
Pulse Connect Secure Certified Expert
zanyterp
Moderator

Re: A valid Root CA Certificate could not be located

in addition to what Kita & [email protected] stated, can you confirm the location where you installed the certificates?
is this a problem for connecting to the appliance as a user or when a user attempts to connect to a backend resource through the rewrite engine? (they have different needs)