Error: "Cannot build a trusted certificate chain for the certificate. Please make sure that you have added all the necessary CA certificates."

book

Article ID: 177399

calendar_today

Updated On:

Products

Messaging Gateway

Issue/Introduction

Error: "Cannot build a trusted certificate chain for the certificate. Please make sure that you have added all the necessary CA certificates." occurs when attempting to select Control Center Certificate.

Symptoms
Certificate has been added underneath Administration > Certificates > TLS & HTTPS Certificates.


 

Cause

The CA certificate or intermediate CA certificate has not been installed on the Symantec Messaging Gateway (SMG) to complete the certificate chain.

Resolution

For successful SMTP/TLS or HTTPS authentication, there must be a complete "path" or "chain" from the client certificate to a CA certificate.

The SMG includes pre-installed certificates for the most common Certificate Authority vendors. If the Certificate Authority vendor is not listed underneath the Certificate Authority tab then you will need to install the CA Certificate.

Some certificate issuers require and provide an intermediate CA Certificate that is used for additional security. Intermediate Certificates will need to be installed underneath the Certificate Authority tab.

To add a CA certificate:

  1. In the Control Center, click Administration -> Certificates -> Certificate Authority.
  2. Click Import.
  3. Click Browse.
  4. Locate and select the file that contains the CA certificate or intermediate CA Certificate.
  5. In the Control Center, click Import.


A status message appears at the top of the page to indicate success or failure.

 

 

 

Attachments

ca-bundle.crt get_app