If you entered an IP address instead of a host name, try entering the host name, then reconnect. The host name you configure in your session must exactly match one of the host names entered in the CommonName field of the certificate. If your PC does not recognize the certificate authority, you will not be able to make SSL/TLS connections. The certificate presented by the host for this purpose must be from a trusted certificate authority. The certificate presented by the server does not contain a host name that exactly matches the host name that you (or your definitive local security provider, such as DNS) specified as the connection target.īefore making an SSL/TLS connection, the client authenticates the host system. If the certificate is valid, you may see this message if the client is not able to reach the OCSP responder or retrieve the CRL file. This message is displayed if the certificate is no longer valid. The host's server certificate has expired.Ĭertificate revocation checking is not returning a valid response. Use the Trusted Certification Authorities tab of the Reflection Certificate Manager to manage your list of trusted CAs. If you have disabled use of the Windows certificate store, you may see this message if you have not yet imported certificates into the Reflection Certificate Manager store. To launch this utility, open the Windows Control Panel, double-click Internet Options, select the Content tab, then click Certificates. If you have enabled use of the Windows certificate store, you can determine which trusted certification authorities are configured for your PC using the Certificate Manager. The host's server certificate is not in your Trusted Root Certification Authorities list.

The host certificate key length requirements are:

The server certificate key size must meet FIPS standards for protecting the shared secret key that will be exchanged and used for encrypting the session. Check with your system administrator to find out what port value to use for your host.Ĭheck with the system administrator for system status or try connecting later.Ĭonfigure the session to connect without sending a version-specific handshake.Ĭheck to see if the server's certificate is unsupported in FIPS mode. In most cases, you will need to change this value for SSL/TLS connections. The default Telnet port is 23 for Telnet and 1570 for VT-MGR connections. Disable SSL/TLS encryption in the Security Properties dialog box if you want to make an insecure connection.Ĭheck the port you are using to make your connections. Check with your server's system administrator to determine the type(s) of encryption supported by the server.Ĭheck with your system administrator to determine that the server is functioning properly. Select a different value for Encryption Strength, or set this to Default and try again.

Error occurred while connecting to ssl