Troubleshooting Tip: Persistent Agent Macintosh TLS Handshake Issue
| Description | This article describes why in some cases, even though a local Root Certificate has been imported in Keychain and marked as 'Always Trusted', MacOS may consider this Root Certificate as untrusted. As a result, the TLS Handshake between Persistent Agent and FortiNAC may not be established.
In this case, even though a local Root Certificate has been imported in Keychain and marked as 'Always Trusted', it would be possible to see the following in Persistent Agent logs:
Checking Peer name fortinac.lab.local against Common or Subject-alternative-name entry fortinac.lab.local |
| Scope | FortiNAC v9.x.y, and FortiNAC-F v7.x.y. |
| Solution |
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ~/your-root-ca-name.cer
sudo launchctl unload /Library/LaunchDaemons/com.bradfordnetworks.agent.plist
Related articles: |
