When importing a CA signed SEPM certificate into ATP 3.0, you get an error regarding the IP address not matching

Products

• Advanced Threat Protection Platform

Issue/Introduction

When installing the certificate for your SEP Manager that, was signed by either an internal or public CA, into Advanced Threat Protection 2.0 or later you see the error "The IP address of the certificate does not match the IP address of the SEPM".

The IP address of the certificate does not match the IP address of the SEPM

Cause

The certificate does not include the IP address of the SEP Manager as one of the Subject Alternative Names. The ATP does not accept domain names for the SEP Manager configuration, so the only reference we have is the IP address.

Resolution

This issue is resolved in ATP 3.1. Please update at your earliest convenience if you experience this error.