How to stop Certificate popups using ERA 6.5

[nickospot 0]

Good day,

Please in need help on how to get this resolved, when users use their browsers they get this prompt at instances and since the UI has been protected they can't apply any of the options "block or allow".

 

Now I need to find a way to get it done over the ERA, I have disabled SSL/TLS filtering but its still not working

 

 

ESET Remote Administrator (Server), Version 6.5 (6.5.522.0)
ESET Remote Administrator (Web Console), Version 6.5 (6.5.388.0)
Microsoft Windows Server 2012 Datacenter (64-bit), Version 6.2.9200 

[MichalJ 434]

The switch in the policy to disable SSL / TLS is not set in "apply" mode, means that variable will not be applied on clients.

[Marcos 5,259]

First of all, this is not an issue on ESET's part. The problem is with the certificate used by the server that you have accessed. In particular, the certificate was issued for 89.185.136.145 (CN) but it's used by cdn.talksport.com. Also the certificate is self signed which is another reason why it's not trusted.

You'll continue to get warnings from your browser even if you disable SSL/TLS filtering which will also expose the computer at risk since encrypted communication will not be scanned by ESET.

[nickospot 0]

Thanks for your response Micah and Macros.

@Micah can you please explain further so I can try it out

@Macros, it's not just this particular screenshot alone it has to do with alot of other sites including those that are "in-house", and most of them are self-signed, hence the need for a work around without client

14 minutes ago, Marcos said:

First of all, this is not an issue on ESET's part. The problem is with the certificate used by the server that you have accessed. In particular, the certificate was issued for 89.185.136.145 (CN) but it's used by cdn.talksport.com. Also the certificate is self signed which is another reason why it's not trusted.

You'll continue to get warnings from your browser even if you disable SSL/TLS filtering which will also expose the computer at risk since encrypted communication will not be scanned by ESET.

 

25 minutes ago, MichalJ said:

The switch in the policy to disable SSL / TLS is not set in "apply" mode, means that variable will not be applied on clients.

 

[Marcos 5,259]

If users visit a lot of untrusted websites because of self-signed certificates they use and neither adding them in the exception list manually nor blocking them automatically is an option, then disabling SSL/TLS filtering is the only way to go:

[nickospot 0]

Thanks trying it out will get back on this

 

[nickospot 0]

Thanks very much

 

[MarcFL 28]

EASY FIX:

RE:  Eset Certificate Pop-ups - An application on this computer is trying to communicate over a channel encrypted with an untrusted certificate

This is happening a LOT more.  It is mostly due to invalid certificates from ads loading on the page.  The best, safest and easiest way to fix it is by changing this simple  setting:

Advanced Setup, Web & Email,  SSK/TLS, Certificate Validity, change "If the Certificate cannot be verified using TRCA..."  to "Block Communication".

See Picture:

ESET:  You need to address this issue as it is becoming a MAJOR annoyance for many of your customers due to invalid certs from advertisements loading on pages.

Edited February 1, 2018 by MarcFL