Solved: Re: Junos Pulse on Ipad question

atechadmin_ · ‎03-26-2012

Hello All,

We are using an SA700 for our VPN clients and have an SSL device cert. Everything works as it should when people use the network connect application on their laptops but the Junos Pulse app gives an invalid cert warning when trying to connect.

Answering igbnore to this warning allows the app to connect and the client can then use the internal network.

My question is how do I resolve this cert warning? INstalling the SA700 SSL cert on the Ipad did not fix this and does not appear in the cert list in Junos Pulse.

Thank you!

SVK_ · ‎03-27-2012

examining the certificate chain you have an intermediate certificate "Go Daddy Secure Certification Authority" Please refer the following KB and upload the intermediate certificate to the SA and Verify the behaviour

http://kb.pulsesecure.net/kb15613

please mark this post as 'accepted solution' if this answers your question that way it might help others as well, a kudo would be a bonus thanks

View solution in original post

zanyterp_ · ‎11-19-2007

Glad to hear it worked successfully for you.

As you found, yes, the GoDaddy intermediate certifcate needs to be installed at System>Certificate>Device Certificate>Intermediate Certificates

zanyterp_ · ‎03-26-2012

Is the certificate a standard root CA? Is the root CA installed on the mobile devices?

zanyterp_ · ‎03-26-2012

What happens through safari (for testing)? Can you unicast me the URL so I can take a look as well for more ideas?

atechadmin_ · ‎03-26-2012

Sent you a message. Thanks

atechadmin_ · ‎03-26-2012

Safari connects me and I can log on but then it stalls when I believe it tries to install network connect which of course will not work on the iPad.

atechadmin_ · ‎03-26-2012

Yes certificate is a standard root. Tried installing on the device but it does not show in the pulse listing of certificates. Maybe I installed it incorrectly....opened it from email attachment and the iPad installed it.

SHKM_ · ‎03-26-2012

Hi,

Try installing Certificate using "iPhone/iPad configuration utility" if it doesn't work, try using another certificate. To install the certificate using "iPhone/iPad configuration utility", you can refer KB http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB21438.

Thanks,

Suresh

SVK_ · ‎03-26-2012

What is the certificate configured on the SA

1. is it self-signed certifcate or issued by a private CA or Public CA?

2. what is the hostname of the SA and the hostname on the certificate?

3. How are you connecting from pulse using the Hostname or IP?

atechadmin_ · ‎03-27-2012

1) Cert is issued by GoDaddy

2) If by hostname you mean URL...it is connect.atechdelivers.com for both the SA and the cert.

3) Conencting from Pulse using the hostname.

Thanks