SRX

 View Only

  • 1.  Configuration download: 2002 - unable to get issuer certificate (Windows)

    Posted 19 days ago

    I have an SRX1500 with SSL VPN licensed, and working for me on Macbook (arm-based) using Secure Connect client.

    Someone using Windows is trying to connect and login, and is getting the following in the logs:

    7/23/2026 12:26:57 PM - Configuration download: MessageQueue: Push new item in queue
    7/23/2026 12:26:57 PM - MONITOR: CfgDownload.StartBanner with result = 1
    7/23/2026 12:27:00 PM - Configuration download:  2002 - unable to get issuer certificate
    7/23/2026 12:27:00 PM - INFO - MONITOR: Configuration download: import certificate "", length=1380
    7/23/2026 12:27:00 PM - Configuration download: HTTPS Post request failed.  2002 - unable to get issuer certificate
    7/23/2026 12:27:00 PM - ERROR - Configuration download: HTTPS Post request failed.  2002 - unable to get issuer certificate
    7/23/2026 12:27:00 PM - ERROR - Configuration download: Finished with error -> HTTPS Post request failed.  2002 - unable to get issuer certificate
    I've seen in some other discussions that this can be down to changing certificates, but I'm using the self-signed certificate and as I say it works on my mac client.
    Any ideas/pointers, please?


    ------------------------------
    TOM KIVLIN
    ------------------------------


  • 2.  RE: Configuration download: 2002 - unable to get issuer certificate (Windows)

    Posted 17 days ago

    If you've double-checked you're indeed using a self-signed certificate, then the error message makes no sense -- the server certificate is also the issuer certificate. Maybe it's just a misreported error for an untrusted certificate? Have you tried adding it to the machine as a trusted root?



    ------------------------------
    Nikolay Semov
    ------------------------------