cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
21663
Views
30
Helpful
17
Replies

Certificate error - No accept button

Rick Daoust
Level 1
Level 1

When launching Jabber I receive the following error message:

The server is presenting a certificate for x.x.x.x that Cisco Jabber cannot accept.

Has anyone else experience this issue?

Regards,

17 Replies 17

Jaime Valencia
Cisco Employee
Cisco Employee

What jabber?? version??

on-prem?? cloud???

HTH

java

if this helps, please rate

Hi Jaime,

I was able to reproduce this issue with version 10.6 and 11.1.0. Our VoIP environment is on premise.

Thanks

OK, but what Jabber??? There are several flavors of Jabber

Can you post a screenshot??

Are the certs public CA signed?? internal CA?? self-signed??

HTH

java

if this helps, please rate

This is Jabber for WIndows on a notebook running Windows 10. As for the certs, these are self-signed. I've attached two (2) screenshots.

This picks my interest as I have the same issue on my company laptop. I don't see this on another laptops. Would be nice to find out what the solution is for this. Jab4win 10.6.2

Please rate all useful posts

Apparently this has something to do with the time setting on my laptop and the certificates.  We have an internal CA and use Jabber for Windows.  This appears to only be a problem on Windows 10 and for whatever reason was only happening on my laptop and Surface Pro which were both upgraded to Windows 10 recently.  I went through and blew away all of the certificates on my machines and copied certs from another laptop that we knew that worked in the same trust stores on our machines.  That did not fix it.  Tried uninstalling and reinstalling from 11.0.1 to 11.5 and then finally decided to go back to 10.5.5 and then all of a sudden it would work with cert errors.  After we installed 10.5.5 we decided to re-install 11.0.1 to see what would happen and that started working with cert errors (different message).  Then uninstalled that and went to 11.5 and that appeared to work.  Also noticed on my machine that the date and time for "setting the time zone automatically" was turned off.  The time looked and appeared correct to me but changed this setting to ON.  From this point, my Jabber for Windows is working but reports invalid certificates for the jabber servers.  No one else in our company has this issue but me.  Still not sure why but it is pointing directly to my Windows 10 upgraded from Windows 7 machines.  I think it is a security setting and/or time setting somewhere but can not narrow it down.  Not all features work such as WebEx but the IM portion is working.  If anything else develops I will update but since no one else has anything on this on the web anywhere, I thought I would share.

Found the solution here:

https://supportforums.cisco.com/discussion/12502021/cisco-jabber-windows-certificate-error

Hi Rick,

I have same issue for one of PC. This PC have this issue for all J4W 10.6 and higher.

I temporarily use 10.5.5 for this PC. This version J4W  trusts our sertificates.

br Oleksandr

 

Hey Jaime,

Our CEO is facing the certificate error on iPhone. Any suggestions?

Version not know yet: so if you could provide general help to fix this will really help.

Thanks,

Mukhtar

AvigilonIT
Level 1
Level 1

Root cause is most likely your certificates are no longer FIPS-compliant, and your local system crypto policy is set to enforce FIPS compliance.  Either update your certificates to meet current FIPS compliance, or disable the local policy (not recommended for obvious reasons).

Oscar Yanez
Level 1
Level 1

Here is the step by step to disable FIPS. That will do the trick.

  1. Using an account that has administrative credentials, log on to the computer.
  2. Click Start, click Run, type gpedit.msc, and then press ENTER.
  3. In the Local Group Policy Editor, under the Computer Configuration node, double-click Windows Settings, and then double-click Security Settings.
  4. Under the Security Settings node, double-click Local Policies, and then click Security Options.
  5. In the details pane, double-click System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing.
  6. In the System cryptography: Use FIPS-compliant algorithms for encryption, hashing, and signing dialog box, Double click Enabled, Select Disabledand then click OK to close the dialog box.
  7. Close the Local Group Policy Editor.

What do you do if you dont have access to group policy due to company restrictions as most organizations do

Please rate all useful posts

Did you mean to say "click Disabled"?