Verify server certificate when executing powershell script in a workflow

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Does anyone know what requirements are for sailpoint to successfully validate a server certificate when executing a powershell script in a workflow?. When we turn that on we receive the following error;{“result”:null,“warnings”:null,“error”:{“detailCode”:“500.1.526 SSL Error”,“message”:{“locale”:“en-US”,“localeOrigin”:“DEFAULT”,“text”:“Unable to verify the server’s SSL certificate.”}}}.

We added the server certificate to the VA’s certificate folder and confirmed the Certificate is not expired, revoked, is signed by Root CA
and target domain name and hostname are in the certificate’s Common Name and Subject Alternative Name.

Is this error due to the fact that sailpoint cloud cannot verify the certificate because it was not signed by a public certificate authority?

2

It sounds like the issue is that SailPoints infrastructure doesn’t trust your internal certificate authority. Even though you added the server certificate to the VA, if it was signed by a private CA rather than a public one, SailPoint potentially won’t be able to validate the certificate chain. I would probably reach out to SailPoint support on a path forward.

3

Have you put all the certificates into the VA certificate folder?

You need to put

  • Server Certificate
  • Intermediate Certificate(s)
  • CA Certificate

i.e. All the certificates in the chain.