This article explains what must be done when an SRX3600 device that is running Junos OS 12.3X48-D75 fails to connect to the Infranet Controller (IC) device, and also explains the reason for the connection to fail.

Without verification of the IC certificate, the SRX device is able to connect to the IC device without any problem. However, when the CA certificate is loaded and used to verify the IC certificate, the SRX device is unable to connect to the IC device.

The loaded CA certificate is issued by an intermediate CA. An intermediate CA is secondary to a root CA, and issues certificates to other CAs in the public key infrastructure (PKI) hierarchy. Therefore, if a certificate is issued by an intermediate CA, you need to specify the complete list of CA profiles in the certification chain for the device to connect successfully.

To resolve the issue, load the SRX device with the root CA. The device can then connect to the IC immediately.

For detailed information about setting up communication between SRX and IC, refer to Set Up Communication between Junos OS Enforcer and IC Series UAC Appliance .