KNOWLEDGE BASE

Error "Peer certificate cannot be authenticated with given CA certificates"


Published: 12 Mar 2014
Last Modified Date: 27 Jun 2017

Issue

When connecting to Tableau Server from Tableau Desktop, the following error might occur:

Cannot connect to Tableau Server. Please check the server name and port and try again.
Internet communication error: Peer certificate cannot be authenticated with given CA certificates (<server name>).

 
When logging in to Tableau Server in a browser, the login is successful.

Environment

  • Tableau Desktop 8.1 and later versions
  • Tableau Server 8.1 and later versions
  • SSL

Resolution

Tableau Desktop on Windows

Verify that required root CA and other chain certificates are installed. For information about manually installing the certificate at the operating system level, see Error: "Internet communication error: The certificate authority is invalid or incorrect" After Signing in to Tableau Server from Tableau Desktop.

Use the following steps to install the certificate:
  1. Copy the certificate file (.crt) to the computer running Tableau Desktop. 
  2. Double-click the certificate file, click Install Certificate, and then click Next.
  3. Select Place all certificates in the following store, click Browse, select Trusted Root Certification Authorities, and then click OK, Next, and Finish.
  4. Allow the importing of the certificate, and then click OK

Tableau Desktop on the Mac

Work with your IT team to add the entire SSL certificate chain to the Tableau Server configuration. For more information, see SSL in Tableau Help. In this instance, the SSL Certificate Chain File in Step 5 of the Configure SSL section is required, not optional.

Additionally, you can add the root certificate to your computer's keychain to ensure that the certificate authority is trusted by your computer. For more information, see OS X Yosemite: If your certificate isn’t being accepted

Cause

This error corresponds to libcurl error code 60, which typically indicates that a CA certificate or some other required certificate in the certificate chain is missing. In some cases, this might be the result of an improper SSL configuration on the computer running Tableau Server. Work with your Tableau Server administrator to ensure that the entire certificate chain, including intermediate certificates, is included in the SSL configuration.

Tableau Desktop on Windows

Tableau Desktop 8.0 uses WinINet to handle HTTP requests, whereas Tableau Desktop 8.1 and later versions use libcurl.

Tableau Desktop on the Mac

Tableau Server requires that all certificates be part of the SSL certificate chain, including the intermediate certificates. When Tableau Server is not configured with the entire certificate chain, the identity of Tableau Server cannot be authenticated.
Did this article resolve the issue?