Security Compliance

SEM: Your certificate contains the same serial number as another certificate issued by CA authority

What to do if you have two SEM instances that you have deployed using same OVA image (either Hyper-V or VMware). Firefox returns the error: Secure Connection Failed. An error occurred during a connection to <lem2 address>.

First published date

11/7/2018 7:54 PM

Last published date

11/7/2018 7:54 PM

Overview

You have two Security Event Manager (formerly Log & Event Manager) instances that you have deployed using same OVA image (either Hyper-V or VMware).

Everything is working fine, and you can access the https://LEM1:8443 and https://LEM2:8443 in Internet Explorer and Chrome, but Firefox (Quantum Release) displays this Error when accessing the SEM web console:
 

Secure Connection Failed

An error occurred during a connection to <lem2 address>. You have received an invalid certificate.
Please contact the server administrator or email correspondent and give them the following information: Your certificate contains the same serial number as another certificate issued by the certificate authority. Please get a new certificate containing a unique serial number. Error code: SEC_ERROR_REFUSED_ISSUER_AND_SERIAL

  • The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
  • Please contact the website owners to inform them of this problem

 

Product section

Security Event Manager

Cause

  • The Certificate Authority being SEM itself, the certificates serial number had not been changed
  • A bug in Firefox (© 2018 individual mozilla.org contributors, available at https://www.mozilla.org/en-US/, obtained on November 19, 2018)

Resolution

In both instances of SEM:

  1. Log in to the CMC console.
  2. Type in "manager," and then press enter.
  3. Type in "confselfsignedcert," and then press enter.
  4. Follow the prompt to continue regenerating a self-signed certificate.
Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment.  You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.