App Control: FailureId[990] Untrusted Server Certificate Issuer

[#1]

Environment

• App Control Server: 8.7+
• App Control Agent: 8.7+

Symptoms

• Agent is failing Health Checks with:

  Carbon Black App Control Agent detected a problem: Untrusted server certificate Issuer [CERTIFICATE AUTHORITY], Serial Number [SERIAL] .... FailureId[990]

Cause

The App Control Server Certificate currently in use is not currently Trusted in the Trusted Communication Certificates list.

Resolution

1. Login to the Console and navigate to System Configuration > Security.
2. Compare the Thumbprint listed in the Current Server Certificate Details against those listed in the Trusted Communication Certificates.
   • If the Thumbprint is listed, verify the Trust is toggled on.
   • If the Thumbprint is not listed, manually import the relevant certificate.
3. On the next Agent Health Check the Failure should be cleared.

Additional Notes

• The Agent will run a Health Check automatically once every 6 hours by default.
• SSL Inspection on port 41002 can prevent an otherwise Trusted Certificate from being validated against the App Control Server.
• If the Trusted Communication Certificates list is not visible, please enable it.
• If the issue persists, please open a case with Support.

Related Content

App Control: How To Import a Trusted Communication Certificate
App Control: How To Run An Agent Health Check
App Control: How to Enable the Trusted Communication Certificates Panel in Server 8.7