An unknown error occurred while processing the certificate

[Former Member]

cdinet Thank you!
From the script result,There is not duplicate entry for epo and agent handler.
Here have 4 angent handlers and 1 epo server,both of them have a unique address.
Site A:have 2 agent handler
Site B:have 1 agent handler
Site C: 1 EPO server,1 angent handler
My current test Ma5.7 connect to epo server directly.

[cdinet]

Can you clarify a little more on the environment regarding your sites?  Are each of the agent handlers in the same datacenter as the epo/sql server?  It needs to be, if not.  Agent handlers require high speed connection to the database - <10ms connection.  Also, if the sites have firewalls or proxy in between there should be no ssl inspection between epo, sql and agent handlers.  Additionally, required ports need to be open - 8443, 8444, 443 from agent handler to epo and sql ports open also.  Agent handlers also require certain ciphers and tls 1.2 to be enabled for the agent handler to be able to talk to tomcat.  Running IISCrypto on each, choose best practices, and reboot will enable any required that might be missing.  You also need to ensure that global root certificates are up to date.