Skip to content

Troubleshooting -
The certificate is unknown

conf_ConfigClients_Browser_Error_HTTPS_NotSecure

The root certificate is not installed in Windows Keystore

Import the root certificate into Windows key storage on the computer.

An incorrect certificate has been installed in Windows key storage

If you can see the name of your certificate in Windows key storage, but the certificate is still classified as unknown, there might be two certificates with the same name and you installed the wrong one.

Certificates can have the same name, but always have an individual thumbprint.

Therefore, compare the thumbprint of the certificate in Windows key storage on the server where the Servicetrace Server is installed with the thumbprint of the certificate that is installed in Windows key storage on the client computer. The two thumbprints should match.

conf_Troubleshooting_CompareThumbprints_MMC_Certificates

To find the thumbprint of a certificate, as described under Importing a certificate into Windows key storage, open the Certificates snap-in in the Microsoft Management Console, select your certificate, and select Open from the Actions on both the server and client computers.

Go to the Certificates window and the Details tab and compare the thumbprints on both computers. Also make sure that the same thumbprint algorithm is used.

Make sure you are comparing the certificates within the same hierarchy level in the chain of trust. The thumbprints differ between the root, intermediate, and server certificates within the same chain of trust.

conf_Troubleshooting_CompareThumbprints_DoNotUseBrowser

Therefore, do not use the padlock icon in your browser to open the comparison certificate for a root or intermediate certificate imported on the client, because only the server certificate is displayed here.