Certificate Chaining Error

book

Article ID: 50008

calendar_today

Updated On:

Products

CA Compress Data Compression for MVS CA Compress Data Compression for Fujitsu CA Datacom - DB CA Datacom CA Datacom - AD CA Datacom - Server CA Mainframe Software Manager (Chorus Software Manager) CA MICS Resource Management CA CIS CA Common Services for z/OS CA 90s Services CA Database Management Solutions for DB2 for z/OS CA Common Product Services Component CA Common Services CA ecoMeter Server Component FOC CA Easytrieve Report Generator for Common Services CA Infocai Maintenance CA IPC Unicenter CA-JCLCheck Common Component CA Mainframe VM Product Manager CA Chorus Software Manager CA On Demand Portal CA Service Desk Manager - Unified Self Service CA PAM Client for Linux for zSeries CA Mainframe Connector for Linux on System z CA Graphical Management Interface CA Web Administrator for Top Secret CA CA- Xpertware CA Datacom/AD

Issue/Introduction

Description:

It seems like there is a problem when CA-MSM tries to access the SUPPORTSERVICES.CA.COM site.

The HTTP Proxy settings:

Enable Proxy settings is ON
Enable Advanced settings is NOT marked

The Test Connection returns : Certificate chaining error.

Cause: Proxy server in the middle does not allow the access through Supportservices.ca.com

Proxy used here: Bluecoat Proxy SG

Use following command from the TSO Ready prompt to verify, you can see the route through your proxy/firewall to supportservices.ca.com.
The command can be entered under TSO on the ISPF P.6 commands prompt:
tracerte supportservices.ca.com

Solution:

If the route stops at only internal addresses it's stopped by the proxy/firewall of your company.

Your Network Administrator needs to add Supportservices.ca.com to the bypass list.

Environment

Release:
Component: MSM