SOTI Pulse Logo

Connection to the CA via the proxy test works, but not in the CA test or when try to creating the certificate

Solved
H
Hauke
ArianeGroup GmbH

Hi.

I am currently trying to connect to our CA from Soti Connect. But we are running into an error.

If I run the proxy test under "Services > Global Proxy" with the URL of the CA, then it works. We can also see this connection on the proxy.

[DEBUG] [58] [Soti.IoT.ManagementServer.exe] Send Request to http://CA-SERVER/TEMPLATENAME via proxy service $PROXYSERVER:8080
[DEBUG] [59] [Soti.IoT.ManagementServer.exe] Test proxy service connection: Success.

However, if I then want to create a certificate or simply press the test-connection button at "Administration > Device Certificates and Templates”, we run into an error. Here we see no connection to the CA on the proxy.

[ERROR] [46] [Soti.IoT.ManagementServer.exe] Fail to connect to CA server with CA template:TEMPLATENAME

Any idea where the problem might lie?

Important: For security reasons, the Soti Connect Server has no connection to the Internet.

Best regards
Hauke

no Internet certificate proxy ca failtoconnect proxy-test
a year ago
SOTI Connect
ANSWERS
H
Hauke
a year ago

The strange explanation and solution was that SOTI Connect and MobiControl, although the proxy was specified with port 8080, initially spoke with port 80, which of course did not work. Forwarding from port 80 to 8080 then provided the solution. Not nice, but at least finally a working solution.

Solution
A
ABMOD@SOTI
a year ago

Hi Hauke,

Thank you for reaching out on SOTI Pulse.

Here are some troubleshooting steps :



• Make sure that your CA server is reachable from the Soti Connect server. You can try to ping the CA server from the Soti Connect server or use a web browser to access the CA server URL. If you cannot reach the CA server, you might need to check your network settings, firewall rules, or DNS configuration.

• Make sure that your CA template is configured correctly in Soti Connect. You need to specify the correct service URL, static challenge key, and thumbprint for your CA template. You can test the connection to your CA template by following the steps in this guide: https://soti.net/soticonnect/v2.1/en/console/certificates/testcatemplateconnection.html?ssp=1&darkschemeovr=1&setlang=en&cc=AU&safesearch=moderate  If the connection fails, you might need to verify or update the CA template settings.

• Make sure that your global proxy settings are consistent with your CA template settings. If you are using a proxy to connect to the CA server, you need to enable the Use Global Proxy option in your CA template settings. If you are not using a proxy, you need to disable this option. You can also try to disable the proxy test in the global proxy settings and see if that makes any difference.

A
ABMOD@SOTI
a year ago

Hi Hauke,

Have you had an opportunity to test the suggested solutions and has it successfully addressed your query?

If not, or If you have any additional questions or concerns, please don't hesitate to reach out. We're dedicated to providing assistance and support.

Also, if this post has helped you in solving your query, I would request you to mark the particular comment as "is solution", so that others may benefit from this information.

Kind Regards,

 

Similar Discussions