Error: Invalid certificate file [0x840d0000] when updating certificate on SEPM

Products

• Endpoint Protection

Issue/Introduction

Attempting to update to a signed certificate in Symantec Endpoint Protection Manager (SEPM)  but cannot update with following error.

Invalid certificate file [0x840d0000] 

Environment

Replacing the default self-signed Symantec Endpoint Protection Manager (SEPM) certificate with a Certificate Authority (CA) signed certificate.

Cause

Certificate file uses CRLF instead of LF.

Resolution

Convert CRLF to LF using dos2unix command on Linux server then import.

[root@xxxx tmp]# openssl x509 -in certificate.crt -text -noout
unable to load certificate
139852742698816:error:0909006C:PEM routines:get_name:no start line:crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE

[root@xxxx tmp]# file certificate.crt
certificate.crt: UTF-8 Unicode (with BOM) text, with CRLF line terminators

[root@xxxx tmp]# dos2unix certificate.crt
dos2unix: converting file certificate.crt to Unix format.

[root@xxxx tmp]# openssl x509 -in certificate.crt -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            xx:xx:xx:xx
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: DC = xxxx, DC = xxxx, CN = xxxx
        Validity
            Not Before: Aug 21 11:16:10 2025 GMT
            Not After : Aug 21 11:16:10 2027 GMT