XGS Certifikates: Certificate authority: Invalid or not installed

Question

Hello, 
 I want to replace an SG firewall with an XGS. I donwloaded the wildcard certificate (.pem) and the certificate of the CA from the SG and uploaded them on the XGS. Though the the wildcard certicicate doesn't trust the CA. How can i solve this problem?

Vivek Jagad · Answer

Hello encar , Thank you for reaching out to the community, there can be two reasons when this shows as invalid: 1.) The CA is invalid when not in the Sophos Firewall CA certificates database. 2.) Duplicate CA certificates in the database. We have a work around - NC-84530 . Would request you to log a service request and revert us here to investigate this further and get this resolved on priority.