Home
CERT+
Automate certificate lifecycle management including issuance, discovery, renewal, and deployment, across public and private trust CAs. Assess, prioritize, and plan your migration to quantum-safe encryption with the Quantum Trust Hub add-on module.
CERT+ Troubleshooting Guide
Troubleshooting for CAs
Troubleshooting for Google Private CA Issues

CERT+
Automate certificate lifecycle management including issuance, discovery, renewal, and deployment, across public and private trust CAs. Assess, prioritize, and plan your migration to quantum-safe encryption with the Quantum Trust Hub add-on module.
PKI+
Provision, govern and scale private trust certificates with a Post Quantum ready cloud based Enterprise PKI-as-a-Service.
SIGN+
Secure software, firmware, and containers with a comprehensive enterprise code signing solution.
SSH+
Control SSH access and key rotation at scale with an SSH key lifecycle management solution.
KUBE+
Unify DevOps and Security teams by managing certificates with a Kubernetes-native certificate lifecycle management solution.
DDI+
Manage domain registration, renewal, decommissioning, and other security controls with an end-to-end domain lifecycle management solution.
ADC+
Automate and orchestrate application delivery infrastructure at scale with an ADC lifecycle automation platform.
Platform
Manage policy and automation across all of the products and modules in the AVX ONE platform.
AppViewX Setup
Get detailed instructions for setting up AVX ONE in on-premises or SaaS deployments.
Release Artifacts
Review new features, fixes, and security advisories with official AppViewX release documentation.

Troubleshooting for Google Private CA Issues

This section helps you troubleshoot the common problems that you might encounter when using Google private CA functionalities like setting addition, certificate enrollment, renewal, regeneration, revocation, suspension, and discovery.

Supported Web Browsers


Browser	Version	Notes
Firefox	Till latest (Version 84.0.4147.135)	NA
Chrome	Till latest (Version 80.0)	NA
IE	Limited support in 9, Full support from 10+	No support for IE9 post AppViewX Version 11.0
Safari	Till latest (Windows - Version 5.1.7, macOS - Version 13.1.2)	From AppViewX Version 11.1
Opera	Till latest (Version 70)	From AppViewX Version 11.1

Supported Devices


Device	OS	Resolution
Desktop	Windows	1024 X 768 onwards, 1366x768, 1920x1080, Higher
Desktop	Linux	1024 X 768 onwards, 1366x768, 1920x1080, Higher
Desktop	Mac	1024 X 768 onwards, 1366x768, 1920x1080, Higher
iPad	iOS	1024 X 768

Issues in Configuring Google Private CA and Google Fetch CA Names


Error Message	Possible Cause	Possible Solution
Unable to save CA settings CA Settings name already exists.	A CA setting with the same name for Google private already exists in inventory.	Check the CA Setting name, it should be unique.
This field should not be null or empty. Mandatory Field(s) - <Field name> is/are empty. CA Settings - [ <Fields>] mandatory fields cannot be empty.	Some of the mandatory fields might be missing or might be invalid.	Add all the valid information in the mandatory section.
Proxy details not configured	Proxy details may not be configured in AppViewX.	Please configure proxy details in AppViewX.
Failed to generate the authentication token	Please check whether the uploaded certificate or JSON is valid.	Invalid client certificate or invalid client Json uploaded.
Failed to generate the authentication token	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Empty response received from the CA.	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Permission '<Operation>' denied on '<Resource>'	Permission may not be available for the <operation> for the resource.	Please give permission to the user for the specific operation for the resource.

Issues in Enrolling a Google Private CA Certificate


Error Message	Possible Cause	Possible Solution
Requested entity already exists	certificateId value may be already used to issue a certificate.	Please change the certificateId value to the CA connector. It should be unique.
error parsing CSR: generic::invalid_argument: invalid signature: x509: cannot verify signature: algorithm unimplemented	Unsupported keytype or curve details may be used.	Please check the key type and curve and use valid types.
Certificate authority is not enabled.	Certificate authority may not be enabled in Google portal.	Please enable the selected certificate authority.
Proxy details not configured	Proxy details may not be configured in AppViewX.	Please configure proxy details in AppViewX.
Failed to generate the authentication token	Please check whether the uploaded certificate or JSON is valid.	Invalid client certificate or invalid client Json uploaded.
Failed to generate the authentication token	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Empty response received from the CA.	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Permission '<Operation>' denied on '<Resource>'	Permission may not be available for the <operation> for the resource.	Please give permission to the user for the specific operation for the resource.

Issues in Renewing a Google Private CA Certificate


Error Message	Possible Cause	Possible Solution
Requested entity already exists	certificateId value may be already used to issue a certificate.	Please change the certificateId value to the CA connector. It should be unique.
error parsing CSR: generic::invalid_argument: invalid signature: x509: cannot verify signature: algorithm unimplemented	Unsupported key type or curve details may be used.	Please check the key type and curve and use valid types.
Certificate authority is not enabled.	Certificate authority may not be enabled in Google portal.	Please enable the selected certificate authority.
Proxy details not configured	Proxy details may not be configured in AppViewX.	Please configure proxy details in AppViewX.
Failed to generate the authentication token	Please check whether the uploaded certificate or JSON is valid.	Invalid client certificate or invalid client Json uploaded.
Failed to generate the authentication token	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Empty response received from the CA.	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Permission '<Operation>' denied on '<Resource>'	Permission may not be available for the <operation> for the resource.	Please give permission to the user for the specific operation for the resource.
CSR or private key is not available. Use the regenerate option.	CSR or private key may not be available.	Use regenerate or upload the private key and perform renew.

Issues in Regenerating a Google Private CA Certificate


Error Message	Possible Cause	Possible Solution
Requested entity already exists	certificateId value may be already used to issue a certificate.	Please change the certificateId value to the CA connector. It should be unique.
error parsing CSR: generic::invalid_argument: invalid signature: x509: cannot verify signature: algorithm unimplemented	Unsupported keytype or curve details may be used.	Please check the key type and curve and use valid types.
Certificate authority is not enabled.	Certificate authority may not be enabled in Google portal.	Please enable the selected certificate authority.
Proxy details not configured	Proxy details may not be configured in AppViewX.	Please configure proxy details in AppViewX.
Failed to generate the authentication token	Please check whether the uploaded certificate or JSON is valid.	Invalid client certificate or invalid client Json uploaded.
Failed to generate the authentication token	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Empty response received from the CA.	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Permission '<Operation>' denied on '<Resource>'	Permission may not be available for the <operation> for the resource.	Please give permission to the user for the specific operation for the resource.

Issues in Revoking a Google Private CA Certificate


Error Message	Possible Cause	Possible Solution
Invalid reason specified.	Revocation reason may not be supported by CA.	Please provide the correct reason.
The requested action is not supported by the issuing CA of the certificate	Selected CA may be in Devops tier.	Please select an Enterprise tier.
Proxy details not configured	Proxy details may not be configured in AppViewX.	Please configure proxy details in AppViewX.
Failed to generate the authentication token	Please check whether the uploaded certificate or JSON is valid.	Invalid client certificate or invalid client Json uploaded.
Failed to generate the authentication token	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Empty response received from the CA.	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Permission '<Operation>' denied on '<Resource>'	Permission may not be available for the <operation> for the resource.	Please give permission to the user for the specific operation for the resource.

Issues in Suspending a Google Private CA Certificate


Error Message	Possible Cause	Possible Solution
Invalid reason specified.	Revocation reasons may not be supported by CA.	Please provide the correct reason.
The requested action is not supported by the issuing CA of the certificate	Selected CA may be in Devops tier.	Please select an Enterprise tier.
Proxy details not configured	Proxy details may not be configured in AppViewX.	Please configure proxy details in AppViewX.
Failed to generate the authentication token	Please check whether the uploaded certificate or JSON is valid.	Invalid client certificate or invalid client Json uploaded.
Failed to generate the authentication token	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Empty response received from the CA.	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Permission '<Operation>' denied on '<Resource>'	Permission may not be available for the <operation> for the resource.	Please give permission to the user for the specific operation for the resource.

Issues in Reinstating a Google Private CA Certificate


Error Message	Possible Cause	Possible Solution
Invalid reason specified.	Revocation reasons may not be supported by CA.	Please provide the correct reason.
The requested action is not supported by the issuing CA of the certificate	Selected CA may be in Devops tier.	Please select an Enterprise tier.
Proxy details not configured	Proxy details may not be configured in AppViewX.	Please configure proxy details in AppViewX.
Failed to generate the authentication token	Please check whether the uploaded certificate or JSON is valid.	Invalid client certificate or invalid client Json uploaded.
Failed to generate the authentication token	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Empty response received from the CA.	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Permission '<Operation>' denied on '<Resource>'	Permission may not be available for the <operation> for the resource.	Please give permission to the user for the specific operation for the resource.

Issues in Discovering Google Private CA Certificates


Error Message	Possible Cause	Possible Solution
Proxy details not configured	Proxy details may not be configured in AppViewX.	Please configure proxy details in AppViewX.
Failed to generate the authentication token	Please check whether the uploaded certificate or JSON is valid.	Invalid client certificate or invalid client Json uploaded.
Failed to generate the authentication token	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.
Empty response received from the CA.	This URL https://www.googleapis.com may not be reachable.	Please check this URL https://www.googleapis.com can be accessible from the network or whitelist this URL.

AppViewX