Root Cause

The certificates are non-self-signed and not in the proper certificate location. Running the command in the solution below will identify the non-self signed certificates and move them over to the correct certificate location.

Solution

To resolve the issue, run the following commands on the Edge Relay Server:

1. Use the following PowerShell command to identify non-self-signed certificates:

   Get-Childitem cert:\LocalMachine\root -Recurse |
   Where-Object {$_.Issuer -ne $_.Subject}

2. Move these non-self-signed certificates into the Intermediate Certification Authorities (i.e. CA) store using the following commands:

   Get-Childitem cert:\LocalMachine\root -Recurse |
   Where-Object {$_.Issuer -ne $_.Subject} |
   Move-Item -Destination Cert:\LocalMachine\CA