Invalid SSL Cert After Upgrade to R80.40

[Wyman]

Hi. We've upgraded our firewall cluster from R80.30 to R80.40 and now, when connecting to the VPN webpage, we get an error saying that the certificate authority is invalid (NET::ERR_CERT_AUTHORITY_INVALID).

I've renewed the internal certificate on the cluster object and re-installed policy. What's the easiest way to fix? We didn't have this issue when upgrading from R77.30 to R80.30. Surely we don't have to import the certificate to the trusted root CA on each machine that will be connecting to the VPN? Thanks in advance.

[PhoneBoy]

Precisely how is the certificate invalid?
In general, upgrades should not change the certificate at all.

[aks_2512]

hi Wyman, were u able to fix this issue. any inputs please.