failed to update policy with serial number

[mallaith]

Hi,

I am getting this error recently when I move computers to another policy.

 failed to update policy with serial number 

Error CodeDescription

3240099844

Configuration reload failed

It was working last week and there are no changes in the network or firewall rules.

Any advice.

[Troja007]

Hello @mallaith ,

do you see this issue on a single host or multiple hosts?

Greetings, Thorsten

[mallaith]

Hi @Troja007 

Multiple hosts Windows Server 2012R2 and Windows Server 2008 R2

[IIIC · Accepted solution]

I had the same issue and it turned out the following certificate was missing:

Thumbprint: df717eaa4ad94ec9558499602d48de5fbcf03a25

Subject Name: C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1

See the following article that was updated today

https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/216943-list-of-root-certificates-required-for-a.html

[mallaith]

Dear @IIIC 

Thank you very much. There was a missing certificate and I have imported the certificate from one of the working servers.

75E0ABB6138512271C04F85FDDDE38E4B7242EFE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root

[IIIC]

Glad to hear it helped.