Question

Updating SSL Certificate - Chrome Extension and Scan It Issue

  • 5 October 2023
  • 5 replies
  • 139 views
E
Rank
Userlevel 2
Badge +7

Hi

 

Last night we updated our SSL certificate as the old one was due to expire. 

Today, none of the IFS Scan It apps will connect on our Android devices.

We have tried everything we can think of and nothing works.

If we open Chrome on the Androids it will log in to browser version of IFS with no issues.

 

As a separate but linked issue, since the SSL was updated, when users go to print, they get dozens of random 1 character printers, which actually all spell out an error message saying:

 

Security Error: Requests from ifs-cloud…… are not trusted – certificate mismatching. Please install the Aurena Agent again for this server.

 

The only fix we have found is to disable the chrome extension and re-enable it on each computer. Surely this can’t be the fix?

 

Any help would be greatly appreciated.

 

Thanks

5 replies

ashen_malaka_ranasinghe
Rank
Userlevel 4
Badge +10

Hi @EILCTHOMPSON,

Can you check this article? 

This article contains all the information related to the following error!

Error from Aurena Agent: Security; Error: Requests from {host} are not trusted. Certificate is missmatching. Please install the IFS Aurena Agent again for this server

 

Find me on LinkedIn as Ashen Malaka: https://www.linkedin.com/in/ashen-malaka-ranasinghe/
E
Rank
Userlevel 2
Badge +7

Hi 

 

why would it need doing with this certificate and not the last one?

ashen_malaka_ranasinghe
Rank
Userlevel 4
Badge +10

Hi 

 

why would it need doing with this certificate and not the last one?

May be there is a certificate mismatch. Did you try to re-install the Aurena Agent?

Find me on LinkedIn as Ashen Malaka: https://www.linkedin.com/in/ashen-malaka-ranasinghe/
Rukmal Fernando
Rank
Userlevel 5
Badge +12

@EILCTHOMPSON for Scan It on Android, it’s likely that your new certificate has an incomplete certificate chain. If your SSL endpoint is externally accessible and on port 443, you can use https://www.ssllabs.com/ssltest/analyze.html to check for this.

If it’s internal and/or on any other port, you might have to use another tool like SSLScan (https://github.com/rbsec/sslscan/releases).

Either way, I suggest that you ensure the certificate chain is complete, because Android devices are quite picky about this.

Hope this helps!

Rukmal

E
Rank
Userlevel 2
Badge +7

Hi, 

We have confirmed that part of the issue is that the Aurena Agent needs uninstalling and reinstalling for it to pull in the new certificate.

To me this is crazy - not too bad on one PC, but when you are dealing with 60-600-6000 PCs its another story.

For me the Aurena Agent needs to be pulling in the certificate on each occasion (or at least provide a button to allow the user to request it?),

Has anyone come up with a clever way to uninstall / install the Aurena Agent in bulk?

Thanks

Reply


Terms & ConditionsCookie settings