After upgrade to SFOS 17.5.12 MR-12 Captive portal do not use my commercial certificate

Hi Ozgur Gursoy 

When you try to access the captive portal with y your own certificate, in the browser which certificate is showing? Could you please share the screenshot or error message you are receiving?

Please refer to the article to verify the configuration - https://community.sophos.com/kb/en-us/132678#Generate%20a%20CSR%20from%20the%20XG%20Firewall%20and%20send%20it%20to%20a%20Certificate%20Authority%20provider%20to%20sign%20it

You can see below image my commercial cert with no problems,

My admininistration settings:

My https://firewall.domain.com:xxxx (administration page)'s certificate info :

You can see my problem in below image :

So, my users get an error while opening captive portal via self signed certificate, before upgrade my firmware Sophos was using true certificate (commercial) in captive portal,

how can i fix it ?

Hi Ozgur Gursoy 

Could you please check the article - https://support.sectigo.com/articles/Knowledge/Sectigo-AddTrust-External-CA-Root-Expiring-May-30-2020

Hi Ozgur Gursoy 

I would advise you to check this KB Article for more info: SSL VPN remote client users are not able to connect due to 3rd party Root CA Sectigo expired. 

Thanks,

It is solved, thank you,

i removed old Sectico's root certificate and install new root certificate, after than i recreated my .csr file and I requested the certificate again from Sectigo (because Sophos XG did not accept my old .key file, why i do not know) 

So, it is working correctly now, 

Hi Ozgur Gursoy 

We glad that we could help you, please reach out to us for further assistance.

Hi Ozgur Gursoy 

We glad that we could help you, please reach out to us for further assistance.