Certificate chain validation failed (in the Advanced Threat Defense security log)

Technical Articles ID: KB95378
Last Modified: 2022-03-23 17:58:46 Etc/GMT

Environment

Advanced Threat Defense (ATD) 4.x

Problem

The ATD security log shows:

Certificate chain validation failed

System Change

You uploaded a custom web certificate to ATD.

Cause

Certificate chain validation fails when one or more of the following conditions are met:

ATD doesn’t have the root CA certificate of your certificate chain.
Your custom web certificate doesn’t have the Authority Information Access (AIA) Extension field that points to your signer certificate.
ATD can’t download the signer certificate from the URL of Authority Information Access (AIA) Extension field.

Solution 1

Upload the root CA certificate of your certificate chain to ATD.

NOTE: You don’t need to upload the intermediate CA certificate to ATD.

Solution 2

ATD validates your custom web certificate by recursively fetching the signer certificate from the URL in the Authority Information Access (AIA) Extension field in your custom web certificate. It performs this fetch until it reaches the root CA certificate. ATD then compares the root CA certificate of the AIA chain with the root CA certificate that you uploaded to ATD.

Make sure you list your signer certificate URL in the AIA Extension field in your custom web certificate.

Solution 3

Make sure that ATD has access to your signer and root CA certificates, via the URL as listed in the AIA field.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Certificate chain validation failed (in the Advanced Threat Defense security log)

Environment

Problem

System Change

Cause

Solution 1

Solution 2

Solution 3

Affected Products

Languages:

Title

Title

Knowledge Center

Certificate chain validation failed (in the Advanced Threat Defense security log)

Environment

Problem

System Change

Cause

Solution 1

Solution 2

Solution 3

Affected Products

Languages:

Choose your region

Title

Title