ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Certificate Chaining Error

book

Article ID: 50008

calendar_today

Updated On:

Products

Compress Data Compression for MVS Compress Data Compression for Fujitsu Datacom DATACOM - AD Mainframe Software Manager (Chorus Software Manager) MICS Resource Management CIS COMMON SERVICES FOR Z/OS 90S SERVICES DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS COMMON PRODUCT SERVICES COMPONENT Common Services CA ECOMETER SERVER COMPONENT FOC EASYTRIEVE REPORT GENERATOR FOR COMMON SERVICES INFOCAI MAINTENANCE IPC UNICENTER JCLCHECK COMMON COMPONENT Mainframe VM Product Manager CHORUS SOFTWARE MANAGER CA ON DEMAND PORTAL CA Service Desk Manager - Unified Self Service PAM CLIENT FOR LINUX ON MAINFRAME MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME GRAPHICAL MANAGEMENT INTERFACE WEB ADMINISTRATOR FOR TOP SECRET Xpertware

Issue/Introduction

Description:

It seems like there is a problem when CA-MSM tries to access the SUPPORTSERVICES.CA.COM site.

The HTTP Proxy settings:

Enable Proxy settings is ON
Enable Advanced settings is NOT marked

The Test Connection returns : Certificate chaining error.

Cause: Proxy server in the middle does not allow the access through Supportservices.ca.com

Proxy used here: Bluecoat Proxy SG

Use following command from the TSO Ready prompt to verify, you can see the route through your proxy/firewall to supportservices.ca.com.
The command can be entered under TSO on the ISPF P.6 commands prompt:
tracerte supportservices.ca.com

Solution:

If the route stops at only internal addresses it's stopped by the proxy/firewall of your company.

Your Network Administrator needs to add Supportservices.ca.com to the bypass list.

Environment

Release:
Component: MSM