Certificate Chaining Error

Products

• Compress Data Compression for MVS
• Compress Data Compression for Fujitsu
• Datacom
• DATACOM - AD
• Mainframe Software Manager (Chorus Software Manager)
• MICS Resource Management
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware

Issue/Introduction

Description:

It seems like there is a problem when CA-MSM tries to access the SUPPORTSERVICES.CA.COM site.

The HTTP Proxy settings:

Enable Proxy settings is ON
Enable Advanced settings is NOT marked

The Test Connection returns : Certificate chaining error.

Cause: Proxy server in the middle does not allow the access through Supportservices.ca.com

Proxy used here: Bluecoat Proxy SG

Use following command from the TSO Ready prompt to verify, you can see the route through your proxy/firewall to supportservices.ca.com.
The command can be entered under TSO on the ISPF P.6 commands prompt:
tracerte supportservices.ca.com

Solution:

If the route stops at only internal addresses it's stopped by the proxy/firewall of your company.

Your Network Administrator needs to add Supportservices.ca.com to the bypass list.

Environment

Release:
Component: MSM