Platform Portal not taking my signed certificate

[SerDiHer0411]

Greetings mates!!

I have a slight problem. 

I have a signed certificate, which has already been imported to my cluster (2 firewalls) in a .p12 format to the Platform Portal section. But when I access the Gaia portal, I still get the "Your connection is not private" error. When checking the certificate, it shows a 192.168.1.1 certificate, which I understand is an auto-signed certificate.

I don't understand why I'm getting this error if the certificate is already imported to the cluster. 

This is a procedure already done in other Gateways, so I don't understand what is happening.

Can you please help me or guide me to a solution please?

Thanks in advance

[the_rock]

Can you send a screenshot of cert on the gateway settings? Please blur out sensitive info.

Andy

[SerDiHer0411]

 Additionally, the certificate is signed by the internal PKI; it has SANs, such as IP addresses of the gateways and the cluster, and DNSs (hostnames of the gateways and cluster, along with the domain)

[_Val_]

It is showing that the certificate does not match the hostname. Are you sure you created it properly? Also, a silly question, did you push policy with these settings yet?

[SerDiHer0411]

I'm uploading the error message, it shows a NET::ERR_CERT_AUTHORITY_INVALID

 This are the steps followed in the creation of the certificate:

- Generate the CSR, which includes SANs

- Send the CSR and .key file to the PKI to be signed

- After they signed it, and sent it back, convert the .cer file to a .p12  using SSL Shopper's tool, which asks the .key file and a password

- Transfer the certificate to the server, in which the console is hosted

- In Platform Portal, import the certificate, in this step, the password configured in SSL Shopper is typed, after which, the certificate is imported

- Install policy on the firewall cluster

- After which, I access to a web browser, such as Chrome or Firefox, but it's where the error is shown

[the_rock]

Can you send screenshot of the cert itself from smart console?

Andy

[SerDiHer0411]

I'm attaching certificate details as it is imported in the console.

There's a previous screenshot of the certificate in Platform Portal

[the_rock]

Cant open any of them, just says virus scan in progress. Can you message me directly?

Andy

[SerDiHer0411]

   Sorry, let me try that again

[the_rock]

I see it now. If you installed policy after cert is uploaded, no reason why it would not work. Maybe engage TAC to confirm everything, hard to say for me without being able to check it via remote session.

Andy