Error: "Cannot build a trusted certificate chain for the certificate. Please make sure that you have added all the necessary CA certificates."
search cancel

Error: "Cannot build a trusted certificate chain for the certificate. Please make sure that you have added all the necessary CA certificates."

book

Article ID: 177399

calendar_today

Updated On:

Products

Messaging Gateway

Issue/Introduction

Error: "Cannot build a trusted certificate chain for the certificate. Please make sure that you have added all the necessary CA certificates." occurs when attempting to select Control Center Certificate.

Cause

The certificate has been added in Administration > Certificates > TLS & HTTPS Certificates but the CA certificate or intermediate CA certificate has not been installed on the Symantec Messaging Gateway (SMG) to complete the certificate chain.

Resolution

For successful SMTP/TLS or HTTPS authentication, there must be a complete "path" or "chain" from the client certificate to a CA certificate.

The SMG includes pre-installed certificates for the most common Certificate Authority vendors. If the Certificate Authority vendor is not listed underneath the Certificate Authority tab then you will need to install the CA Certificate.

Some certificate issuers require and provide an intermediate CA Certificate that is used for additional security. Intermediate Certificates will need to be installed underneath the Certificate Authority tab.

To add a CA certificate:

  1. In the Control Center, click Administration -> Certificates -> Certificate Authority.
  2. Click Import.
  3. Click Browse.
  4. Locate and select the file that contains the CA certificate or intermediate CA Certificate.
  5. In the Control Center, click Import.

A status message appears at the top of the page to indicate success or failure.

Additional Information

For more, please refer to the technical documentation about certificates.