IPA web UI Certificate Authorities tab shows error : tlsv3 unknown CA
Issue
- IPA is originally installed with integrated CA, but after that configured with externally signed server certificate for httpd and/or dirsrv by following correct steps as the following documentation:
-
Install the new external CA chain using below steps: manual-cert-install
Note: The new external CA certificate chain also needs to be updated in IPA clients and browsers.
-
Once the new external CA chain has been installed successfully , the http server certificate was installed as per below link : replace-http-ldap-cert
- However, after logging in the IPA web UI successfully, the
Certificate Authoritiestab returns errortlsv3 unknown CA.
Environment
- IPA
- RHEL 7.9
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.