SSL Error: The function is unfamiliar with the Certificate Authority that generated the server's certificate

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• Agent is disconnected
• dascli status an SSL Error:

  SSL Error: The function is unfamiliar with the Certificate Authority that generated the server's certificate

• dascli status shows SSL Mode set to "Strong

  SSL Mode: Strong (Validate CAs, Validate CNs)

  

Environment

• App Control Agent: All Supported Versions
• Microsoft Windows: All Supported Versions

Cause

Endpoint is trying to validate the Certificate Authory (because SSLMode set to "Strong") and is unable to. This can occur because:

• A self signed cert is being used
• A certifcate from an internal CA is being used, but hasn't been distrubited to the endpoint

Resolution

Option 1:

• Import the missing certificate to the devices cert store

Option 2:

• Disable certficate verification