Skip to main content

Hi

 

Last night we updated our SSL certificate as the old one was due to expire. 

Today, none of the IFS Scan It apps will connect on our Android devices.

We have tried everything we can think of and nothing works.

If we open Chrome on the Androids it will log in to browser version of IFS with no issues.

 

As a separate but linked issue, since the SSL was updated, when users go to print, they get dozens of random 1 character printers, which actually all spell out an error message saying:

 

Security Error: Requests from ifs-cloud…… are not trusted – certificate mismatching. Please install the Aurena Agent again for this server.

 

The only fix we have found is to disable the chrome extension and re-enable it on each computer. Surely this can’t be the fix?

 

Any help would be greatly appreciated.

 

Thanks

Hi @EILCTHOMPSON,

Can you check this article? 

This article contains all the information related to the following error!

Error from Aurena Agent: Security; Error: Requests from {host} are not trusted. Certificate is missmatching. Please install the IFS Aurena Agent again for this server

 


Hi 

 

why would it need doing with this certificate and not the last one?


Hi 

 

why would it need doing with this certificate and not the last one?

May be there is a certificate mismatch. Did you try to re-install the Aurena Agent?


@EILCTHOMPSON for Scan It on Android, it’s likely that your new certificate has an incomplete certificate chain. If your SSL endpoint is externally accessible and on port 443, you can use https://www.ssllabs.com/ssltest/analyze.html to check for this.

If it’s internal and/or on any other port, you might have to use another tool like SSLScan (https://github.com/rbsec/sslscan/releases).

Either way, I suggest that you ensure the certificate chain is complete, because Android devices are quite picky about this.

Hope this helps!

Rukmal


Hi, 

We have confirmed that part of the issue is that the Aurena Agent needs uninstalling and reinstalling for it to pull in the new certificate.

To me this is crazy - not too bad on one PC, but when you are dealing with 60-600-6000 PCs its another story.

For me the Aurena Agent needs to be pulling in the certificate on each occasion (or at least provide a button to allow the user to request it?),

Has anyone come up with a clever way to uninstall / install the Aurena Agent in bulk?

Thanks


Reply