Query on using Registration Key to enroll remote access certificate

[PJ_WONG]

Hi Checkmates,

I am testing on using the registration key for Certificate Enrolment, so that I can distribute the VPN certificates to user using registration key.

However I got message that the enrolment failed.. But if I download the certificate manually then everything works fine.

Am I missing out something to use registration key for enrolment? I have attached the images for reference, appreciate any advise on this.

Thank you.

[PhoneBoy]

What version/JHF of gateway?
What client version?
Did you pull the client logs to see if there any clues there?

[PJ_WONG]

Hi PhoneBoy,

I am using R81.10 JHF 150 in my lab.

The client version is E88.50 Build 98105707

I can see this error in logs:

[TrGUI] EnrollCBFunc: callback called with error code -4 , (Remote Access VPN could not establish connection with Internal CA.

Enter the server IP or server name and try again.

The firewall policy is allow any traffic, and I can ping it, is additional settings needed?

Thanks,

PJ

[the_rock · Accepted solution]

Does it happen on every machine? Maybe try E88.62 client as a test. Though, based on those messages you sent, appears its communication to the gateway thats failing. Do you see any logs about this in smart console?

Andy

[PJ_WONG]

Hi Andy,

Am able to connect with E88.62 client, appreciate your suggestion on this.

Didn't suspect it is a version issue as the key enrolment should be a basic function..

Thanks,

PJ

[the_rock]

Glad we can help. Yea, always something to consider with endpoint clients, for sure.

Andy

[PhoneBoy]

Key Enrollment has been there for quite some time.
Not sure what in E88.50 causes issues with it, but glad the latest version is working.