FTD Unknown CA when used for Active Authentication against non-AD LDAP

Razvan A. — Wed, 13 Jan 2021 20:06:49 GMT

Hello community,

I am trying to use the Captive Portal with a FMC/FTD deployment that is at version 6.6.1.

I got the Realm configured and downloaded the users, using the Digicert root CA as a trusted CA since the LDAP certificate is a wildcard certificate issued by Digicert.

I have configured the Identity policy and Access Control policy and I get to the point where I trigger the Captive Portal redirect and I get the user credentials prompt.

After I enter the credentials, the FTD appliance (not the FMC) is trying to verify/bind with the LDAP and fails the TLS negotiation with Unknown CA error (attached error info from a wireshark capture). On the LDAP side, the debugging shows the exact same error. The FTD appliance is the one issuing the Unknown CA message.

Has anyone faced the same issue? Does anyone know of a way to upload Trusted CAs onto the FTD appliance? The Device Certificate section is for adding device certificates which were issued by a CA.

Thank you,

Razvan

topic FTD Unknown CA when used for Active Authentication against non-AD LDAP in Network Security

FTD Unknown CA when used for Active Authentication against non-AD LDAP