Cannot install a CA Certificate

[rubix8]

During the installation of the client, there is a part where it asks the name of the server. Type the IP address instead.

At least that worked for me.

[fabiano.matos]

@trev-lchs

Hello folks
I’m still having the same problem.

FOG Server 1.5.9
Clients 0.12.2 and 0.11.16 give the same error “Unable to install CA certificate”

Any ideas how to solve this?

[Trev-lchs]

@fabiano-matos this is what worked for us buddy::

OK I am just very stupid, My apologies everyone. However. this might be a great opportunity to help others. Please when installing the client, in the box that says Fog Server, make sure you clear the box (the word FogServer) and enter the IP of your Fog Server then click next. The easy thing to do is just click next on the install, that’s when you get the CA error as it has no idea where the fog server is.

[fabiano.matos]

@trev-lchs thanks trev
I did like you said. In the box fogserver I’ve tried my DNS and my IPV4 address. But still getting the same error.
That’s why I’m asking you all… Cause your solution does not work here.
But thanks for your interest and help;

[Trev-lchs]

@fabiano-matos can you ping the fog server from the client PC?

[fabiano.matos]

@trev-lchs Yes… ping FQDN (dns) and IP

[rodluz]

@fabiano-matos said in Cannot install a CA Certificate:

I did like you said. In the box fogserver I’ve tried my DNS and my IPV4 address. But still getting the same error.

Few questions:
Just making sure, when you say “my IPV4 address” you mean the FOG Server’s IP address right?

Was this a clean install of the FOG client on the computer or did you have an older version already installed?

Is your FOG server set up with HTTPS? If so, are you checking the Use HTTPS to connect to FOG server box?

[fabiano.matos]

@rodluz

Just making sure, when you say “my IPV4 address” you mean the FOG Server’s IP address right?

Yes, I’ve tried with ip of the server and with dns like ‘fog.sub.domain.com’. My pc client can ping server via IP ou DNS.

Was this a clean install of the FOG client on the computer or did you have an older version already installed?

Yes, this is a computuer clean, when never installed any version of FOGClient.

Is your FOG server set up with HTTPS? If so, are you checking the Use HTTPS to connect to FOG server box?

Yep. The server is running with both ports (80 and 443). Tried install client via https (checking use HTTPS box) and without this option (via http)

Checking my firewall, the packets are passing to the server.

[Trev-lchs]

@sebastian-roth HI Sebastian, do you think you could take a look at this thread and help Fabiano , I am out of ideas.

[Sebastian Roth]

@fabiano-matos said in Cannot install a CA Certificate:

Unable to install CA certificate

@Trev-lchs Hmm, do you have GPOs applied that might prevent from certificate being installed? https://forums.fogproject.org/post/131875

Or anti virus tools can cause this as well: https://forums.fogproject.org/post/88558

As well you might check the log file found in C:\Windows\Temp\FOGService.install.log to see more information on why it fails.

[fabiano.matos]

@sebastian-roth Thanks for this tip. I didn’t known the location of this log.

Looking at this file I found the problem: My server doesn’t have/created a ca.cert.

 22/11/2022 15:24:38 Middleware::Communication Download: https://mydomain/fog/management/other/ca.cert.der
 22/11/2022 15:24:39 Middleware::Communication ERROR: Could not download file
 22/11/2022 15:24:39 Middleware::Communication ERROR: O servidor remoto retornou um erro: (404) Não Localizado.
 22/11/2022 15:24:39 Installer Could not download server CA cert from FOG server
 22/11/2022 15:24:40 Installer ERROR: Unable to install CA certificate

After reinstall server (making sure CA was create), the problem was solved. Now FOGClient installation was completed without errors.

Thank you all @Sebastian-Roth @Trev-lchs @rodluz for the help

I’m having another problem now, but I think its best to use another topic for this.

[Sebastian Roth]

@fabiano-matos said in Cannot install a CA Certificate:

I didn’t known the location of this log.

You are welcome. This was missing in our documentation (like many other things). I just updated the docs: https://docs.fogproject.org/en/latest/getting_started/install_fog_client.html#installer-issue

[Trev-lchs]

@sebastian-roth Thanks Sebastian, great that its all good now and another great bit of info on here…