Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

HTTPS Certification Failure appears when accessing some sites

    • Updated:
    • 29 Oct 2013
    • Product/Version:
    • InterScan Web Security Virtual Appliance 5.6
    • InterScan Web Security Virtual Appliance 6.0
    • Platform:
    • Virtual Appliance 4.1
Summary
You get the following error when accessing some HTTPS sites:
HTTPS Certificate Failure
A problem was detected when accessing this web site. Access has been restricted due one of more of the following issues.
Event Details:
URL: www.<url_name>.de
The Certificate Verification failed due to at least one of the following reasons:
  1. The certificate is not valid.
  2. The certificate's CommonName does not match the URL
  3. The certificate was issued by an untrusted certificate authority.
However, you are allowed to override this warning.
Detailed Message:
VERIFY DENY: depth=1, (27) certificate not trusted: "<Certificate name>"
VERIFY DENY: depth=1, (20) unable to get local issuer certificate: "<Certificate Name>"
Details
Public
The error appears if the certificate is not trusted. This most commonly occurs if the Certificate Authority (CA) is not yet known to InterScan Web Security Virtual Appliance (IWSVA).
To resolve the issue, export the certificates from Internet Explorer (IE) and import them into IWSVA.
If you are using version 6.0:
  1. Export all Trusted Root Certification Authorities from IE:
    1. Go to Tools > Internet options > Content tab.
    2. Click Certificates and go to the Trusted Root Certification Authorities tab.
    3. Select all root/intermediate CAs and click Export.
    4. Select the Cryptographic Message Syntax Standard - PKCS #7 Certificates (.P7B) format and name the file “from_ie”.
    The exported file from_ie.p7b will be created
  2. Upload the file to the /tmp directory of IWSVA.
  3. Log in to IWSVA as root user, and import the file by executing the following commands:
    cd /usr/iwss/bin
    ./import_cert.sh /tmp/from_ie.p7b
Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
1099448
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.