ZRS fails to install using Subordinate CA certificate in der format

  • 7015522
  • 13-Aug-2014
  • 13-Aug-2014

Environment

Novell ZENworks Configuration Management 11.3

Situation

ZENworks Reporting Server (ZRS) install fails to accept external CA certificate in der format.

ERROR:  

The issuer of the specified signed server certificate doesn't match the CA certificate subject

or

The certificate chain present in External CA Certificate file does not end with a Root CA



Resolution

Make a pb7 file that contains the full chain including subordinate CA and root CA certificates.  Use this for the CA certificate file set during installation.

example:  openssl crl2pkcs7 -nocrl -certfile subca.pem -out cafile.p7b -certfile ca.pem