Description

This article describes how to fix certificate errors while loading configuration to RMA device. 

Symptoms

Below error is observed while loading configuration:

[profile Test_New]: Error: Unable to get cert type for server certid: test1

[application-identification]: Install is in progress, please retry later

configuration check-out failed.

Solution

For using Juniper Secure Connect, SSL VPN etc, you need certificates to be installed in SRX. In RMA device, these certificates will not be present because this needs to be generated and loaded to the device.

 

In the configuration of these features, you will be calling these certificates. So when these certificates are not present in SRX and when you add the configuration, it will throw the mentioned error. This indicates, the certificate needs to be added to SRX for committing the configuration. 

 

To fix this, you have to load the certificates, either self signed certificate or certificate signed by CA to SRX. Once the certificates are loaded to SRX, you will be able to commit the configuration. 

Modification History

2024-11-19 : Article Created

Related Information

How to generate Certificate request : [SRX] Generating a PKCS10 certificate request

How to generate self-signed certificate: [Junos] How to create a custom self-signed certificate for web-management using HTTPS