When importing a CA signed SEPM certificate into ATP 3.0, you get an error regarding the IP address not matching

Article Id: 170864

Status: Published

Updated On: 25-04-2018 11:21

Legacy Id: TECH248845

Products:

Advanced Threat Protection Platform

Issue/Introduction:

When installing the certificate for your SEP Manager that, was signed by either an internal or public CA, into Advanced Threat Protection 2.0 or later you see the error "The IP address of the certificate does not match the IP address of the SEPM".

The IP address of the certificate does not match the IP address of the SEPM

Cause:

The certificate does not include the IP address of the SEP Manager as one of the Subject Alternative Names. The ATP does not accept domain names for the SEP Manager configuration, so the only reference we have is the IP address.

Resolution:

This issue is resolved in ATP 3.1. Please update at your earliest convenience if you experience this error.