topic Re: Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store. in Collaboration Applications

Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

eslam rizk — Thu, 10 Oct 2019 22:22:21 GMT

I am Trying to upload Server Certificate for Expressway C and E in my Test Environment, but i am getting below Error message:

Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

I was able to upload CA Root Certificate on C and E

and then tried to upload CRL List , but still couldn't upload C and E Server Certificate

My Deployment is : Windows 2012 acts as DNS/AD/CA and Expressway 8.10.4 with UCM 12.0

+++++++++++++++++++++++++++++++++++++++

I have followed the section : Enable AD CS to Issue"Client and Server Certificates

https://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/config_guide/X8-10/Cisco-Expressway-Certificate-Creation-and-Use-Deployment-Guide-X8-10.pdf

CA Root Cert , CSR and Expressway C Signed Cert attached

I just attached it as .txt as its only allowed ext for attachments , change Certs to .CER to and certcrl to .crl

Re: Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

Jaime Valencia — Fri, 11 Oct 2019 14:17:37 GMT

SHA1 has been deprecated for quite some time, even VCS changed to SHA256 as the default for the CSRs back in 2015.

Re: Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

eslam rizk — Sat, 12 Oct 2019 13:58:18 GMT

I have reinstalled CA Role with using SHA256 ,

Reissue the Certificate, but still getting same error message

I am attaching Both CA and Expressway C signed Cert using SHA256

Re: Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

eslam rizk — Sat, 12 Oct 2019 15:11:45 GMT

Finally I wasa able to upload the CA and Server Certificate to C and it was accepted

but when i tried to do the same for E , Faced Same error

Re: Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

ahmedalfurjani7574 — Sun, 13 Oct 2019 21:17:52 GMT

hi ,

i have same problem , how you reslove that !!

advice me plz

Re: Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

Carlos Olortiga — Wed, 30 Oct 2019 20:38:35 GMT

Recently I had the same problem, it was caused because the NTP had an incorrect date, so if the certificate validation date is in future, you always received the message. "Invalid Certificate: Unrecognized CA".

Re: Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

GM2020 — Sat, 16 Nov 2019 20:48:55 GMT

Hi eslam,

May i know how you over come the error - ""nvalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

Thank you !

Re: Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

bhelvacioglu — Tue, 10 Dec 2019 18:11:28 GMT

I had the same problem. Windows DC root Cert is installed on ExpC but I wass getting the error.
Hello,

When I check the NTP on ExpC and check the DC time, I realize that the time is different.
I change the NTP (NTP was working on windows router in my environmen ) and reboot the ExpC. After reboot CA signed certificate install successfully.

Re: Invalid certificate: Unrecognized CA. This certificate is not currently trusted by the Expressway. This is because the CA certificate is not in the trust store.

Amine_majdi — Fri, 19 Jun 2020 21:13:52 GMT

Thank you it after configurer NTP, it work for me

Re: Invalid certificate: Unrecognized CA. This certificate is not curr

Oswaldo Torres — Tue, 02 Nov 2021 04:43:37 GMT

Tks... It was the Windows Server Time