A Problem occurred during linking. See 'orion.log' for details. (Certificate not verified.)

Technical Articles ID: KB89062
Last Modified: 2023-07-21 08:48:00 Etc/GMT

Environment

ePolicy Orchestrator (ePO) 5.10.x
MVISION Cloud Bridge 2.x extension
Trellix Active Response (TAR) 2.x

Problem

When you try to link your McAfee Cloud Bridge account to ePO, you see the following error:

A Problem occurred during linking. See 'orion.log' for details. (Certificate not verified.)

When you view the orion log on the ePO server, you see the following error:

ERROR [http-nio-8443-exec-169] action.CloudBridgeServerSettingsAction - Error occurred in McAfee ePO Cloud Bridge registration process
javax.net.ssl.SSLException: Certificate not verified.
at com.rsa.sslj.x.aG.b(Unknown Source)
at com.rsa.sslj.x.aG.a(Unknown Source)
at com.rsa.sslj.x.aG.a(Unknown Source)
at com.rsa.sslj.x.ap.c(Unknown Source)
at com.rsa.sslj.x.ap.a(Unknown Source)
at com.rsa.sslj.x.ap.j(Unknown Source)
at com.rsa.sslj.x.ap.i(Unknown Source)
at com.rsa.sslj.x.ap.h(Unknown Source)
at com.rsa.sslj.x.aR.startHandshake(Unknown Source)

Cause

A network proxy or firewall blocks the connection between ePO and the McAfee Cloud Bridge.

Solution

Confirm that a Firewall or Proxy is blocking the connection between ePO and the McAfee Cloud Bridge:

Check the connection from ePO to the URL https://<McAfee ePO server:8443>/remote/epo.cloudbridge.getProvisioningServiceURLCommand.
1. From your ePO server, open a Firefox or Chrome browser window.
  
  NOTE: You can't use Internet Explorer to perform this task.
2. Type the following URL:
  https://<McAfee ePO server:8443>/remote/epo.cloudbridge.getProvisioningServiceURLCommand.
  
  NOTE: In the URL, change <McAfee ePO server:8443> to the name or IP address of your McAfee ePO server and the correct port it uses for the console-to-application server communication port. The default port is 8443, unless it's changed during ePO installation.
3. When prompted for credentials, enter the credentials you use to log on to ePO.
  - A successful connection displays the message below:
    OK: https://provision.auth.ui.trellix.com/provision/
  - An unsuccessful connection displays the message below:
    Page not found or this site can't be reached
Verify the connection from ePO to the URL below:
https://provision.auth.ui.trellix.com/provision/
1. From your ePO server, open a Firefox or Chrome browser window.
  
  NOTE: You can't use Internet Explorer to perform this task.
2. Type the following URL: https://provision.auth.ui.trellix.com/provision/
  - A successful connection displays the message below:
    {"code":"ResourceNotFound","message":"/provision/ does not exist"}
  - An unsuccessful connection displays the message below:
    Page not found or this site cannot be reached
Review the results:
- If any of these tests fail, it indicates that a network firewall or proxy is blocking communication between the ePO server and Cloud Bridge. To resolve the issue, you must perform the Resolution below.
- If these tests work and you still can't link your account, contact Technical Support.

Resolution:

Allow proper communication to the McAfee Cloud Bridge. Add the following FQDN exceptions to the firewall:
- https://provision.auth.ui.trellix.com/provision/
- https://validatetoken.auth.ui.trellix.com
Depending on the region specified on the TAR Workspace Configuration page, add the following FQDN exceptions:
- EU (Frankfurt):
  https://api1.eu1.soc.mcafee.com
- US East (N. Virginia):
  https://api1.us2.soc.mcafee.com
- US West (N. California):
  https://api1.soc.mcafee.com
  
  NOTE: You must enter your firewall or proxy by URL only; don't use an IP address.
After the exceptions have been made, perform the connectivity tests listed above again.
If they still fail, contact Technical Support.
Link the McAfee Cloud Bridge account in the ePO System Settings.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

A Problem occurred during linking. See 'orion.log' for details. (Certificate not verified.)

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

A Problem occurred during linking. See 'orion.log' for details. (Certificate not verified.)

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title