Troubleshooting
This section describes the issues you may run into and how to resolve them. If you face an issue that is not listed here, contact Thales Customer Support.
Errors in CipherTrust Secrets Management
| Error/Issue | Possible Cause | Resolution |
|---|---|---|
tls: failed to verify certificate: x509 | The certificate is signed by an unknown authority, or the gateway is attempting to connect to a server that has a self-signed certificate from a Certificate Authority (CA). | 1. Obtain the signing CA certificate of the server that caused the connection failure. 2. Upload the certificate as an external CA on the CipherTrust Manager. 3. Add the CA as a trusted CA in Akeyless by using the "trusted-cas" endpoint using the following command: ksctl trusted-ca-cert add --trusted-ca-id <external-ca-id> --trusted-ca-type external --service secrets-manager4. Restart Akeyless by disabling the secrets-manager service (Admin Settings > Services) , then re-enable it, or restart all services on the CipherTrust Manager using one of the following methods:* CLI command: ksctl services restart* GUI: Admin Settings > Services > System Restart |
