topic Windows VPN using Capsule - Required certificate is not within its validity period in SASE and Remote Access

Windows VPN using Capsule - Required certificate is not within its validity period

innesst — Tue, 07 Sep 2021 17:05:46 GMT

Starting Monday September 6, 2021, I am getting the following error when I try to log in using the windows VPN system. I have successfully logged in this way for years. If I turn the system clock on my computer back to September 5, I can log in, but it disconnects when I set the clock to the correct date.

A required certificate is not within its validity period when verifying against the current system clock of the timestamp in the signed file. (Excep_FromHResult 0x800B0101)

I tried uninstalling and re-installing the capsule, but there is no change.

Re: Windows VPN using Capsule - Required certificate is not within its validity period

PhoneBoy — Tue, 07 Sep 2021 21:31:24 GMT

Certificates have a particular validity period and if you are outside the validity period, the certificate is not treated as valid.
It's not something you can fix on your end, the site you are connecting to will have to update the certificate.

Re: Windows VPN using Capsule - Required certificate is not within its validity period

innesst — Wed, 08 Sep 2021 16:55:14 GMT

That makes sense, thank you. However, I can log in to the same VPN address both using SecurRemote and SSL Network Extender (going to the website on internet explorer) with no issues at all. Do either / both of these use a different certificate? I note that the fingerprint is the same for both Capsule and SecurRemote, but different for SSL Network Extender.

Re: Windows VPN using Capsule - Required certificate is not within its validity period

PhoneBoy — Wed, 08 Sep 2021 23:23:53 GMT

Possibly a different certificate, but it should be the same source (Internal CA).
Either way, it's not something you can fix on your end.
A TAC case will probably be necessary to investigate further.