HTTPS self-signed Certificate broken on NMC3 AP9641 (v2.3.1.1) "NET::ERR_CERT_INVALID" Chrome Browser

[leschnik]

Hi all,

I've noticed on a few of our UPS' that they're unable to be logged into via the Chrome Browser due to the error "NET::ERR_CERT_INVALID" and that Chrome is not allowing this HTTPS error to be bypassed.

Critical Information:

Device: NMC3 AP9641 

Firmware: v2.3.1.1 (Issue occurred also on v2.0.0.5)

Error: NET::ERR_CERT_INVALID

Problem: The self-signed certificate is missing both the Organization (O) and Organizational Unit (OU) fields from the Cert.

Steps Taken so far:

1. Factory resetting the card => No change
2. Disabling HTTPS, reloading the card, re-enabling HTTPS, and reloading again => No change
3. Trying to manually delete the certificate with `ssl key -d` => No Change 
4. Attempted to delete the files from ssl/, none exist

It almost seems like there are missing Environment variables on the card that the Self-Signed Certificate code uses to generate the cert that is missing. 

Can anyone help?

Attachments

• Error message attached from Chrome
•  

Regards,

Jason.

[leschnik]

Attachments

• Error message attached from Chrome
• Output from `ssl cert -s` from a working and broken UPS (Both running an NMC3)

[JonPro · Accepted solution]

Hi @leschnik 

Kindly refer to the FAQ article below where we have outlined the recommended procedures for this issue.

Unable to access NMC3 in Chrome - ERR_CERT_INVALID - FAQ000246377 

I see that you have done one of the procedures but a step has been missed out, highlighted in red.

• Delete the ECC self-signed certificate on the NMC and generate an RSA cert. The commands can be performed via the CLI:
  • apc>ssl key -d
  • apc>ssl key -rsa [1024|2048|4096]

---

[leschnik]

Thanks Jon for some reason Google didn't index that FAQ and the FAQ itself doesn't do a partial match if you search for "NET::ERR_CERT_INVALID". But that's exactly what I needed, most of the steps I took were from my own research/testing. But that article is perfect. Hopefully, the community.se.com articles are indexed in Google and make it easier for the next person to run across the issue to find the FAQ article. 

Many thanks!

[JonPro]

Glad that I was able to help @leschnik