SSL Certificate issue in Active Directory

[gwagh]

Hi Team,

We have imported certificate in Saviynt but while testing we are getting below error.

Can you please let me know is that java issue or certificate issue ? In SC2.O client do we have to install java separately?

Thanks,

Gaurav

[rushikeshvartak]

Below are possible root cause

1. Outdated SSL/TLS Version: Ensure that both the client and server are configured to use a secure version of SSL/TLS. Older versions like SSLv3 and TLSv1.0 are considered insecure and may cause this error. Upgrade to a more secure version like TLSv1.2 or TLSv1.3.

2. Cipher Suite Compatibility: Verify that the cipher suites configured on the server and supported by the client are compatible. Some older cipher suites may be vulnerable or incompatible with modern SSL/TLS implementations. Ensure that strong and secure cipher suites are used.

3. Certificate Issues: Check if the SSL certificate being used is valid and properly configured. Ensure that the certificate is issued by a trusted Certificate Authority (CA) and that it hasn't expired or been revoked. Additionally, ensure that the certificate's subject and SAN (Subject Alternative Name) match the hostname being accessed.

4. Key Length: Ensure that the key length used for SSL/TLS encryption is appropriate. Keys with insufficient length may be vulnerable to attacks. Use key lengths recommended by security standards.

[gwagh]

Okay, Let me check with IT team. 

Thanks,

Gaurav

[gwagh]

Hi @rushikeshvartak , We are importing private key certificate will that work? Or only Public key certificate we should use?