The PCoIP Security Gateway is failing a security scanner with SSL certificate errors

Rate this Article

August 2, 2018

Last modified: 11/10/2022, 7:32 am

Knowledge Base Article Troubleshooting Security HP Anyware

Problem

When running a security scan against the PCoIP Security Gateway, it fails based on factors such as:

SSL Certificate - Subject Common Name Does Not Match Server FQDN port 4172/tcp over SSL
SSL Certificate - Signature Verification Failed Vulnerability port 4172/tcp over SSL

Failing the security scan for the certificate can be for many reasons including:

PCoIP Security Gateway is using the default self signed certificates
The security scan is running by access the IP rather than using the FQDN based on the security gateway's host record
The SSL Certificate does not have the IP in the subject alternative name
The Root CA is not trusted

If is recommended that the default certificate is replaced on the PCoIP Security Gateway. Refer to the administrators' guide for the PCoIP Connection Manager and PCoIP Security Gateway for instructions for the version of the PCoIP Security Gateway in use.
Note: By default the PCoIP Connection Manager and PCoIP Security Gateway share the same certificate on the appliance.
Scan the appliance via the FQDN rather than IP.
Ensure the security scanning software trusts the root CA.