License Refresh: The underlying connection was closed: Could not establish trust relationship for the SSL TLS secure channel.

License Refresh: The underlying connection was closed: Could not establish trust relationship for the SSL TLS secure channel.

Problem

During a publication task, the AutoPublish.log records a notification: "License Refresh: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel."

Cause

The console device does not trust one of the certificates in the SSL certificate chain securing the website.

Resolution

  1. Allow the URLs for Lenovo Patch functionality from the URL Exception List and Certificate Verification Sites Knowledge Base Article.
  2. Allow the URLs for the Certificate Verification Sites from the URL Exception List and Certificate Verification Sites Knowledge Base Article.
  3. On the device with the License Refresh error, do the following:
    • Open a web browser.
    • Navigate to https://stlicense.ivanti.com
    • In, on, or near the address bar, find the icon providing further information about the security and certificate on the site.
    • Review the certificate and determine what part of the chain is not trusted.
    • If the untrusted certificate is the root certificate, follow Microsoft documentation to update the root certificates on the device.