This article describes the certificate error faced while installing SWAN agent on Juniper device.

The customer encountered a certificate error ("veriexec: cannot validate /packages/db/pkginst.86759/manifest.certs: subject issuer mismatch") while installing the SWAN agent for the first time on their device. This error indicates a certificate mismatch.

Investigating the device, we discovered that the SWAN configuration was missing. Adding the following configuration resolved the issue:

set system extensions providers juniper license-type juniper deployment-scope internal
set system extensions providers juniper license-type juniper deployment-scope private
set system extensions providers microsoft license-type customer deployment-scope commercial