Unable to run the BlackBerry Enterprise Server User Administration Tool as a result of the remote certificate name not matching the host

Article ID: KB35356

Type: Support Content

Last Modified: 04-02-2014

 

Product(s) Affected:

  • BlackBerry Enterprise Server for Microsoft Exchange
  • BlackBerry Enterprise Server Express for Microsoft Exchange
  • BlackBerry Enterprise Server Resource Kit
CollapseEnvironment
  • BlackBerry Enterprise Server 5.0 to 5.0 SP3
  • BlackBerry Enterprise Server Resource Kit 5.0 to 5.0 SP3
CollapseOverview

The following error message may appear when running the BlackBerry Enterprise Server User Administration Tool to add users or any other command:

Error setting up authentication: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel

In addition the following log lines will be seen in the BlackBerry Enterprise Server User Administration Tool logs:

[ERROR] The remote certificate name does not match the host
[ERROR] Error setting up authentication: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
[ERROR] The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
[DEBUG] at RIM.Enterprise.BRK.BESUserAdminClient.BESUserAdminClient.SetUpAuthentication()

CollapseCause

Cause 1

The correct BAS pool name was not used when installing the BlackBerry Enterprise Server User Administration Tool.

Cause 2

The BlackBerry Administration Service does not have the correct SSL certificate with the BlackBerry Administration Service pool name.

CollapseResolution

Cause 1

The correct BAS pool name was not used when installing the BlackBerry Enterprise Server User Administration Tool. 

Resolution 1

Uninstall the BlackBerry Enterprise Server User Administration Tool and install it again with the correct BlackBerry Administration Service pool name. 

Cause 2

The BlackBerry Administration Service does not have the correct SSL certificate with the BlackBerry Administration Service pool name.

Resolution 2

Ensure that the BlackBerry Administration Service uses the correct certificate with the correct BlackBerry Administration Service pool name.

Disclaimer

By downloading, accessing or otherwise using the Knowledge Base documents you agree:

   (a) that the terms of use for the documents found at www.blackberry.com/legal/knowledgebase apply to your use or reference to these documents; and

   (b) not to copy, distribute, disclose or reproduce, in full or in part any of the documents without the express written consent of RIM.


Visit the BlackBerry Technical Solution Center at www.blackberry.com/btsc.