cancel
Showing results for 
Search instead for 
Did you mean: 

Getting "Filtering out the Certificate" based on its key-usage

Highlighted
New Contributor

Getting "Filtering out the Certificate" based on its key-usage

Below is my pulse log:

00113,09 2015/12/07 20:26:32.551 3 Dad Pulse.exe Pulse p8316 t2080 jamCert.cpp:334 - 'JamCertLib' Found 1 personal certs
00229,09 2015/12/07 20:26:32.551 3 Dad Pulse.exe Pulse p8316 t2080 jamCert.cpp:346 - 'JamCertLib' 0) Processing Certificate (Subject: test user, Issuer: MY-CA-1, Thumbprint: 86A58BB0BBE684C3DDA7C63678B722C47DF408C3) ...
00252,09 2015/12/07 20:26:32.567 3 Dad Pulse.exe Pulse p8316 t2080 jamCert.cpp:351 - 'JamCertLib' Filtering out the Certificate (Subject: test user, Issuer: MY-CA-1, Thumbprint: 86A58BB0BBE684C3DDA7C63678B722C47DF408C3) based on its key-usage

Client authentication is on the certificate, the CA certificate is installed in pulse for use with the web browser and client. Any ideas?
4 REPLIES 4
Highlighted
Occasional Contributor

Re: Getting "Filtering out the Certificate" based on its key-usage

The issue could be with the CA that issued the certificate. I think there is a requirement to have Basic Constraints:CA:TRUE.
Search for Basic Constraint in the forum to find some older posts about this.
Highlighted
Community Manager

Re: Getting "Filtering out the Certificate" based on its key-usage

Pulse will filter through certificates to ensure they have the client authentication EKU and they are issued by a CA on the trusted client ca's list.
Highlighted
New Contributor

Re: Getting "Filtering out the Certificate" based on its key-usage

Thanks kita. The certificate has client auth in the EKU and the cert is imported onto the trusted CA list as well. This error is primarily occurring in Windows 10.
Highlighted
New Contributor

Re: Getting "Filtering out the Certificate" based on its key-usage

Thanks dcvers. The CA certificate has:

Subject Type=CA
Path Length Constraint=None

Is there a way to change this for a Microsoft standalone CA?