Failure Authenticating to HACloud Through Internet Information Services (IIS)

  • 7024168
  • 03-Oct-2019
  • 11-Nov-2019

Environment

Host Access for the Cloud
Host Access Management and Security Server (MSS)
Microsoft Windows Server 2012 and later
Microsoft IIS 7.0 and later

Situation

When attempting to login to HACloud through IIS using TLS, the user receives an authentication failure.

The error “certificate_unknown(46)†is logged in the “zfe.log†file on the Management and Security Server (MSS).

Resolution

1. Create a new IIS certificate with:

  • Key Usage of Data Encipherment, Digital Signature, Key Encipherment, and Non Repudiation.
  • Extended Key Usage of Client Authentication and Server Authentication.
2. Install the new cert on IIS.

Cause

If IIS is using a self-signed certificate that is generated by IIS itself, it does not create a certificate with “Digital Signature†set in the certificate “Key Usage.â€