ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

unable to import WSSRootCert -- Certificate is a duplicate of certificate authority certificate

book

Article ID: 238107

calendar_today

Updated On:

Products

ISG Proxy

Issue/Introduction

Hi 

i am trying to configure proxy forwarding to WSS instance and using this a the guide

Configure Symantec Appliance Proxy Forwarding (broadcom.com)

i am trying to import the root cert as the prerequisite 

but i encounter this error when i try to import the cert into the proxysg

 

 

10.3.13.153 - Blue Coat SG-VA Series#(config);;Begin CA Certificates Settings
10.3.13.153 - Blue Coat SG-VA Series#(config)ssl
10.3.13.153 - Blue Coat SG-VA Series#(config ssl)inline ca-certificate WSS eof1648483306698
-----BEGIN CERTIFICATE-----
.......
-----END CERTIFICATE-----
eof1648483306698
% Certificate is a duplicate of certificate authority certificate BC_Cloud_Services_Root_CA
10.3.13.153 - Blue Coat SG-VA Series#(config ssl)
10.3.13.153 - Blue Coat SG-VA Series#(config ssl)exit
10.3.13.153 - Blue Coat SG-VA Series#(config);;End CA Certificates Settings

Environment

Release :

Component :

Resolution

The error message indicates the WSS root cert is the same(duplicated) as the existing cert BC_Cloud_Services_Root_CA

Hence it's not necessary to import the WSS root cert, just use the OOTB BC_Cloud_Services_Root_CA as WSS root cert, and add it to the browser-trusted list.