I am running SFOS 17.5.9 MR-9 and having trouble with CAA for Mac (I do not have a Win machine to test with currently).
Presently I am using the XG provided certificates. I have installed the SSL cert and am seeing HTTPS inspection work properly. Also have downloaded the Appliance cert to get error-free access to the admin and user portals.
After logging on to the user portal and downloading the Mac client, I drag the App to the Applications folder and the certificate to the Shared folder. The first time I execute the program it asks for my credentials which I supply. After clicking OK I am immediately presented with "Server is not thrustworty! / Program will now terminate."
Frustratingly, I have no way to test on iOS devices because I need to open the SCC file from the user portal with the iOS client authentication tool, but Safari does not trust the user portal and will not allow me to download the file - even after adding the Default CA and appliance certs to iPhone.
CAA is enabled on LAN and WLAN zones. macOS Catalina 10.15.1
At this point I can't help but feel that I'm missing something silly...
What should I be checking to validate my config?
Thanks.
This thread was automatically locked due to age.
