Wildcard certificate for HTTPS

S
Samuel
GRUPO SIRO

Hello,

We set the public HTTPS connection with our wildcard certificate for our domain. The 5494 and 443 ports are redirected to our deployment server in a public subdomain. Now we can't enroll new devices. 

Have we to import this certificate in our deploy server and regenerate the deployment server certificates?

Edited 7 years ago
SOTI MobiControl
ANSWERS
RC
Raymond Chan Diamond Contributor
7 years ago

What platform(s) of devices are you dealing with?

What are the version and build numbers of your MobiControl  server? 

Did you find problem with an old add-devices rule that was functional previously?  Have you tried using a new add-devices rule instead?

S
Samuel
7 years ago

We're actually dealing with Android+ and Android Enterprise, but we want to work also with Windows Mobile and iOS devices.

Our server is in version 14.2.0.2894

I tried old and new rules. The device seems to reach the server, shows the certificate (our wild certificate, not the Mobicontrol one) but even if you accept it, fails to enroll.

RC
Raymond Chan Diamond Contributor
7 years ago (edited 7 years ago)

Hi Samuel,

As long as your wildcard certificate cover the sub-domain you've been using (before and after the certificate change) for your MobiControl server,  there shouldn't be any problem.  This of course assumes that you install everything properly.

Have you run MCadmin.exe to import the new root certificate for your SSL certificate, and update the binding to your new SSL certificate to the relevant services?  If so, did you also run the tests within MCadmin.exe after the binding task?

S
Samuel
7 years ago

I imported the signer as Root Certificate, it seems fine, but when i try to import the Wildcard to the Deployment Server, fails with the next error:

RC
Raymond Chan Diamond Contributor
7 years ago

So, it seems that you haven't installed things properly.

I'm not sure what you have done from your screenshot.  There can be many possible reason(s) for import problems.  E.g. you might be missing intermediate certificate (between the DigiCert Root CA and your wildcard SSL certificate in the cert. hierarchy) on your system, or the SSL certificate you tried to import does not have private key embedded.

It may not be convenient to go into details on your particular implementation in this open forum.   If you still have problem, I suggest you to open an official support case with Soti support team.

P
PRMOD@SOTI
6 years ago

Hello Samuel, 

I would suggest you get in touch with Soti Support and we can take a closer look at this if this is still noticed.