SSL Certificate in Lansweeper 11.4.1.2

[Enzo]

Hello guys.

I'm trying to install a certificate from my CA on a Lansweeper: v. 11.4. 1.2 on a Windows Server 2022 Standard server with IIS Express.

The steps I took were the following:
1. I already have my CA added to all browsers.
2. I followed the steps indicated in the following link:

https://community.lansweeper.com/t5/customizing-the-web-console/configure-ssl-in-iis-express/ta-p/64...

When I open my certificate it says that the certificate is not secure, however my CA is included in the Google Chrome browser.

Actually, if I change the Thumbprint to another number it stops working, which is logical, but when I put the correct Thumbprint the browser works but tells me that it is not secure.

Does anyone have any idea what it could be?

Thanks.

[Jacob_H]

is there a specific error on the connection warning page (in chrome for example)    example:  NET::ERR_CERT_DATE_INVALID  which is exactly what I just noticed my home lab says as I forgot to renew the cert 🙂

[Enzo]

Hello Jacob.

The error that appears in my browser is the following: NET::ERR_CERT_AUTHORITY_INVALID.

It is the typical error when the certificate cannot be validated, but I do not understand why it happens since in our network the CA and the intermediate CA are in all browsers.

[emmy]

The error NET::ERR_CERT_AUTHORITY_INVALID, as its name indicates, occurs when your browser fails to validate the authenticity of the SSL certificate that secures your website. You shouldn’t get this issue unless you haven’t installed a certificate or are utilizing HTTP, which isn’t recommended for your website. There can be several reasons such as:-

1) SSL Certificate that is self-signed

2) Outdated SSL Certificates

3) The certificate was installed incorrectly

4) An insecure network connection

5) Outside or third-party applications.  

Many other reasons can also be there for the issue of the error. I also found out the helpful resource from:- https://certera.com/kb/how-to-fix-net-err_cert_authority_invalid-error-in-chrome/. 

[Enzo]

Hello
I have not been able to solve the problem.

Thank you.

Enzo.

[DavidPK · Accepted solution]

 We usually recommend adding the SSL certificate to multiple stores by following the steps below:

• Open the Start menu on your Lansweeper server, select Run and run mmc as administrator.
• The Microsoft Management Console will open.
• In the File menu, select Add/Remove Snap-in.
• Select Certificates and hit Add.
• Select Computer Account in the resulting popup.
• Select Local Computer.
• Hit Finish and then Ok. 
• In the File menu, select Add/Remove Snap-in again.
• Select My User Account
• Hit Finish and then Ok.
• Browse to Console Root\Certificates... Ensure your certificate is present in all of the following stores:
   ○ Current User > ... > Personal
   ○ Current User > ... > Trusted Root Certification Authorities
   ○ Local Computer > ... > Personal
  Local Computer > ... > Trusted Root Certification Authorities

[Enzo]

DavidPK. Thank you for your reply,

I have already verified that the certificate is in:

Current User > ... > Personal
Current User > ... > Trusted Root Certification Authorities
Local Computer > ... > Personal
Local Computer > ... > Trusted Root Certification Authorities

I also noticed that the Lansweeper certificate is in

Local Computer > ... > Personal
Local Computer > ... > Trusted Root Certification Authorities

However, it appears in my browser as an unsecured connection.

Thank you.

Enzo.