There is a problem with this website's security certificate (accessing the ePO console remotely)

Technical Articles ID: KB87031
Last Modified: 2023-07-20 07:14:02 Etc/GMT

Environment

ePolicy Orchestrator (ePO) 5.x

Problem

When you open the ePO console remotely, the following certificate error displays and the user needs to click Continue to this website (not recommended) to access the ePO logon page.

There is a problem with this website's security certificate.

Cause

There's no trust relationship between the ePO server and the system that's opening the ePO console.

Solution

Perform the following on the Microsoft IIS server or Certificate Server, and import the ePO server certificate to the remote system used to access the ePO console:

Open Microsoft Management Console (MMC) on the ePO server. Press Windows+R, type MMC, and press Enter.
Add the Certificates snap-in using the computer account:
1. Click File and select Add/Remove Snap-in. The Add or Remove Snap-ins window opens.
2. Select Certificates and click Add.
3. Select Computer account and click Next.
4. Select Local computer (selected by default) and click Finish.
5. Click OK. You now have a snap-in named Certificates (Local Computer) in MMC.
Export the ePO server certificate Orion_CA_Host_Name from MMC. The Host_Name varies depending on the name of your server.
1. Expand Certificates.
2. Expand Trusted Root Certification Authorities and select the Certificates folder.
3. Right-click the ePO server Root Certification Authority, and select All Tasks, Export. The Certificate Export wizard opens.
4. Select the following in the wizard:
  1. Select Cryptographic Message Syntax Standard - PKCS #7 Certificates (.P7B).
  2. Select Include all certificates in the certification path if possible.
  3. Click Next.
  4. Specify a file name.
  5. Click Next, Finish. The file <chosen_filename>.p7b is created.
5. Copy <chosen_filename>.p7b to the remote system used to access the ePO console.
Install the certificate on the system using one of the following methods:
- Method 1 - Right-click the certificate file:
  1. Right-click <chosen_filename>.p7b and select Install Certificate. The Certificate Import wizard opens.
  2. Click Next.
  3. Select Place all certificates in the following store.
  4. Click Browse.
  5. Select Trusted Root Certification Authorities and click OK.
  6. Click Next, Finish.
- Method 2 - Import using Microsoft Internet Explorer:
  1. Open Internet Explorer.
  2. Select Tools, Internet options.
  3. Click the Content tab.
  4. Click Certificates.
  5. Select the Trusted Root Certification Authorities tab.
  6. Click Import. The Certificate Import wizard opens.
  7. Click Next.
  8. Click Browse.
  9. Browse to and select the <chosen_filename>.p7b file.
  10. Click Next.
  11. Select Place all certificates in the following store and Trusted Root Certification Authorities.
  12. Click Next, Finish.

Related Information

Also, see KB72477 - How to generate a custom SSL certificate for use with ePO using the OpenSSL toolkit.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

There is a problem with this website's security certificate (accessing the ePO console remotely)

Environment

Problem

Cause

Solution

Related Information

Affected Products

Languages:

Title

Title

Knowledge Center

There is a problem with this website's security certificate (accessing the ePO console remotely)

Environment

Problem

Cause

Solution

Related Information

Affected Products

Languages:

Choose your region

Title

Title