PAM-CM-1916: Error: Certificate failed OCSP verification.

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

An attempt to upload a new PAM server certificate fails with error "PAM-CM-1916: Error: Certificate failed OCSP verification.". On the CRL Options page type "Use OCSP" and it has been working well with the current certificate.

Cause

PAM did not have the certificates of the signing certificate authorities loaded.

Resolution

Upload all certificates in the chain. Start by uploading the Root CA certificate on the Configuration > Security > Certificates > Upload page, selecting type "CA Bundles". Then upload each intermediate CA certificate with type "Intermediate Certificate". As long as the upload is successful, you can ignore any OCSP-related warning while uploading the intermediate CA certificate(s). Last upload the new server certificate. It should be successful now.