This article describes an issue where Pulse Connect Secure / Pulse Policy Secure fails to register with Pulse One (On-Premise).

You are unable to register one or more PPS or PCS appliances to Pulse One On-Prem. When the attempt fails and the following error is presenting the the appliance event log.

System()[] - Failed to execute 'Registration Request'. Details 'Transfer returned result code 60 (Peer certificate cannot be authenticated with given CA certificates). Error Message: SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed., REST call failed for resource https://pulseone.myPulseOne.com/api/v1/sa/register'

Connection error with Pulse One: SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed; Host: pulseone.myPulseOne.com
 

 

This issue occurs due to the fact that Pulse Connect Secure and Pulse Policy Secure must trust the device certificate installed on the Pulse One device to complete a successful SSL handshake. It is important that PPS and PCS contain not only the certificate that signed the Pulse One certificate but also include any intermediate certificates as well.

 

Install the certificate that signed the Pulse One appliance device certificate. If that certificate was an intermediate certificate install any intermediates above it as well as the root certificate under "Trusted Root CAs" on your PPS or PCS appliance.

If your Pulse One appliance is using a self-signed certificate see the KB below.


KB43689 - Unable to register appliances to Pulse One On-Prem configured with a self-signed certificate