Sophos XG Home V21 GA Lets Encrypt Certs not shown for Administration

Hi Frank Jepsen ,

can you please enable support access and provide the access ID in a PM?

We'd like to investigate this issue on your system.

Thank you,

Janos

This turned out to be a CA root configuration issue and is now resolved.

Tanks for posting the solution. I have the same issue. What did you do exactly to fix this issue?

I think in 2021 I added the "ISRG Root X1" certificate manually because X3 was expiring.

I added it with spaces in the name which caused no problem with my self made root cert but the new Lets Encrypt technology from Sophos depends on naming it with underscores (ISRG_Root_X1) as it seems.

Janos replaced the root cert and added the missing root id in my user defined certs in the DB.

So perhaps look if have the Lets Encrypt root certs correctly named and then recreate the user certs.

Or let Janos help you.

Thanks Frank for Sharing your Solution.

Daniel from Sophos Support helped me solving my Problem. In my Case the System-Time of the Firewall was behind about two days. So from the standpoint of the firewall the NotBefore-Date on freshly issued Let's Encrypt Certificates was in the future.

Enabling NTP Time-Sync solved the Problem instantly.