Environment
Novell ZENworks Configuration Management 11.3
Situation
ZENworks Reporting Server (ZRS) install fails to accept external CA certificate in der format.
ERROR:
The issuer of the specified signed server certificate doesn't match the CA certificate subject
or
The certificate chain present in External CA Certificate file does not end with a Root CA
Resolution
Make a pb7 file that contains the full chain including subordinate CA and root CA certificates. Use this for the CA certificate file set during installation.
example: openssl crl2pkcs7 -nocrl -certfile subca.pem -out cafile.p7b -certfile ca.pem