cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
202
Views
1
Helpful
3
Replies

Unable to validate certificate

banoosh
Level 1
Level 1

Dears, 

 

i am getting the below errors any idea how to resolve it, the root cert is already installed.\

 

[28-Apr-2024 11:05:42 UTC] Install Certificate, on device caaaa438-ce6e-4afa-8b69-b896782de3f5, started by user "admin" from IP address "10.255.1.51"
[28-Apr-2024 11:05:45 UTC] Pushing serial list to vManage-caaaa438-ce6e-4afa-8b69-b896782de3f5 (manger)
[28-Apr-2024 11:05:46 UTC] Started processing serial list file on vManage-caaaa438-ce6e-4afa-8b69-b896782de3f5 (manger)
[28-Apr-2024 11:05:48 UTC] Completed processing serial list file on vManage-caaaa438-ce6e-4afa-8b69-b896782de3f5 (manger)
[28-Apr-2024 11:05:49 UTC] Done - Push vSmart List for vManage-caaaa438-ce6e-4afa-8b69-b896782de3f5 (manger)
[28-Apr-2024 11:05:49 UTC] Pushed serial list to vManage-caaaa438-ce6e-4afa-8b69-b896782de3f5 (manger)
[28-Apr-2024 11:05:50 UTC] Updated controllers with new certificate serial number of vManage-caaaa438-ce6e-4afa-8b69-b896782de3f5
[28-Apr-2024 11:06:00 UTC] Failed to process device request (rpc-reply error) -
Error type : application
Error tag : operation-failed
Error Message : root-ca-chain unable to validate the certificate... Aborting !
Error Message : Certificate Install Unsuccessful Error: root-ca-chain unable to validate the certificate... Aborting !
Error info :
[28-Apr-2024 11:06:00 UTC] Pushing serial list to vManage-caaaa438-ce6e-4afa-8b69-b896782de3f5 (manger)

 

1 Accepted Solution

Accepted Solutions

the Root CA maybe not enough if there is Sub-Root CA which also need to install 
check the issue name in Cert. with the Root CA you use 

MHM

View solution in original post

3 Replies 3

Hi,

do you push from vmanage gui certs to controllers?

Verify root-ca on other devices using: show certificate root

HTH,
Please rate and mark as an accepted solution if you have found any of the information provided useful.

the Root CA maybe not enough if there is Sub-Root CA which also need to install 
check the issue name in Cert. with the Root CA you use 

MHM