How to fixed the Untrusted Site error

FS
Fred Schmid
Magna Services of America

Every time we connect to MobiControl application we get an error saying the site is unsecure.  It says the Security Certificate was not issued by an trusted certificate authority.  We can still get around this but it is annoying.

How do we fix this problem?

5 years ago
Windows
ANSWERS
MD
Matt Dermody Diamond Contributor
5 years ago

If it is an on premise server then you can configure SSL with a wildcard cert for your internal domain. If it is a SOTI Cloud server then that should be configured already. 

FS
Fred Schmid
5 years ago

Hi Matt,

It is an on premise server.  How do we configure SSL with a wild cert?  Do we use the MobiControl Admin utility?

MB

Hi Fred, 

did you have in your Company one how can Create for your internal Network and this Server IP & DNS Entrys a Certificate?

When you have imported this into the MobiControl Administration Urility -> Certificates as Root Certificate this Error should dissaper.

FS
Fred Schmid
5 years ago (edited 5 years ago)

Hi Marcus,

Not sure what you mean by "did you have in your Company one how can Create for your internal Network and this Server IP & DNS Entrys a Certificate?".  Can you explain how this is done?

Also, we did create a normal ssl certificate for the server.  We tried adding it in the MobiControl Administration Utility but something went wrong.  We are getting errors with the Deployment server in the MobiControl Administration Utility System Health window.

FS
Fred Schmid
5 years ago

Are there instructions anywhere that tell how to set this up for a Soti MobiControl server?

FS
Fred Schmid
5 years ago

We have created a company issued certificate with the name of the server.  It is listed in the Console Root Certificates (Local Computer) Personal Certificates folder in the MMC console program on Windows Server 2012.  There is another certificate created by the Soti MobiControl installation program with the same name (except it is in capital letters) issued by MobiControl Root CA.

This did not correct the problem. The new company certificate is listed in the "Cerificate Bindings" section in the "Certificates" tab (on the left) in MobiControl Administration Utility.  The Ceritficate Type Name is "Deployment Server" but I think this broke something so I pointed it back to the certificate that was issued by MobiControl Root CA.  That did not fix the problem.  It is still saying there is a "Primary address exception: System.Security.Authentication.AuthenticationException:  The remote certificate is invalid according to the the validation procedure.....

We are running Soti MobiControl version 11.0.3.15352.

RC
Raymond Chan Diamond Contributor
5 years ago

If you are using internal IP for your MobiControl server and a self-signed certificate for your DSE/web-console, you are bound to get the "untrusted site" warning from any modern web browser.    Tb be trusted, the site should have a pulbic IP, FQDN and a strong enough SSL certificate bind to the FQDN  purchased  from a reputable CA vendor.

FS
Fred Schmid
5 years ago

I called SOTI support and they had me install the Soti certificate on the client PC.  This fixed the problem.