KNOWLEDGE BASE

Error "Peer certificate cannot be authenticated with given CA certificates"


Published: 12 Mar 2014
Last Modified Date: 11 Apr 2018

Issue

When connecting to Tableau Server from Tableau Desktop, the following error might occur:

Cannot connect to Tableau Server. Please check the server name and port and try again.
Internet communication error: Peer certificate cannot be authenticated with given CA certificates (<server name>).

 
When logging in to Tableau Server in a browser, the login is successful.

Environment

  • Tableau Desktop 
  • Tableau Server 
  • SSL

Resolution

Tableau Desktop on Windows


Step 1

Work with your local IT team to verify that required root CA and other chain certificates are installed. 
Use the following steps to install the certificate:
  1. Copy the certificate file (.crt) to the computer running Tableau Desktop. 
  2. Double-click the certificate file, click Install Certificate, and then click Next.
  3. Select Place all certificates in the following store, click Browse, select Trusted Root Certification Authorities, and then click OK, Next, and Finish.
  4. Allow the importing of the certificate, and then click OK

 


Step 2

Ensure there are no duplicate certificates for Tableau Server CA in the Windows certificate store. 
Some of these certificates may not match the actual Tableau Server certificate, which will cause the error.

  1. Open the Start menu and type certmgr, then open Manage computer certificates.
  2. Navigate to Trusted Root Certification Authorities > Certificates
  3. If there are duplicate certificates for Tableau Server, open each one and check the Serial number on the Details tab.
  4. Delete all the Tableau Server certificates whose serial number does not match the correct Tableau Server certificate.
  5. Follow steps 3 and 4 for any duplicate Tableau Server certificates in Intermediate Certification Authorities > Certificates.
  6. Restart Tableau Desktop and retry the connection.


Tableau Desktop on the Mac

Work with your IT team to add the entire SSL certificate chain to the Tableau Server configuration. For more information, see SSL in Tableau Help. In this instance, the SSL Certificate Chain File in Step 6 of the Configure SSL section is required, not optional.

Additionally, you can add the root certificate to your computer's keychain to ensure that the certificate authority is trusted by your computer. For more information, see OS X Yosemite: If your certificate isn’t being accepted

Cause

This error corresponds to libcurl error code 60, which typically indicates that a CA certificate or some other required certificate in the certificate chain is missing.

 

Did this article resolve the issue?