To identify the missing certificate, run the following command using openssl.
openssl s_client -connect <IVE-Host-name>:443
The above command will output the complete certificate chain. With the list, compare the certificates loaded in Pulse Connect Secure appliance. In most cases, there should always be more than 1 certificate. If only 1 certificate is provided in the output, contact your certificate authority to clarify what intermediate certificates are needed.
- Log in to admin console
- Navigate to Configuration > Certificate > Device Certificates > Intermediate CAs
- Click Import CA certificate
- Browse to the Intermediate CA obtained from the CA
- Click OK