KB Article | Forcepoint Support

Problem Description

Environment

Security Management Server (SMC) 5.7 and later 
Next Generation Firewall (in IPS role)

Problem

You have Stonesoft IPS combo 5.2.10x and upgrade SMC to version 5.8.x or later. SMC 5.8 does not support the 5.2.x IPS combo engine, and so you upgrade the engine to NGFW 5.4.x or later. In the Management Client, you upgrade the IPS combo to an IPS element, but when you perform the policy installation to the upgraded IPS element, it fails with the error:
 
Certificate Error: Invalid Certificate Component Type

Resolution

Cause

After you upgrade IPS combo to IPS element, the old IPS sensor and analyzer certificates are still present and prevent policy installation.

Solution

Restart the Management Server after upgrading the IPS combo element to IPS element. The Policy installation will succeed after the restart.

Article Feedback



Thank you for the feedback and comments.