Monitoring and reporting for Veeam Data Platform
Post Reply
AlexLeadingEdge
Service Provider
Posts: 518
Liked: 80 times
Joined: Dec 14, 2015 9:42 pm
Full Name: Alex F.
Contact:

ERR_SSL_KEY_USAGE_INCOMPATIBLE

Post by AlexLeadingEdge »

Hi guys,

I'm trying to change my notification email provider to Microsoft 365, but when I log into Microsoft 365 I get the error ERR_SSL_KEY_USAGE_INCOMPATIBLE

ChatGPT tells me it is because the self-signed certificate that VeeamONE version 12.3.0.4670 is using doesn't have "DigitalSignature".
Your cert’s Key Usage is:

DataEncipherment, KeyEncipherment

Missing DigitalSignature

Modern TLS (especially TLS 1.2/1.3 in browsers) expects the server cert to be permitted for Digital Signature (for the handshake). Without it, Chrome throws ERR_SSL_KEY_USAGE_INCOMPATIBLE even though EKU says “Server Authentication”.

So the fix is: replace the certificate with one that includes DigitalSignature (and usually KeyEncipherment), then rebind port 1239.
Is there a way to update / upgrade the certificate?
AlexLeadingEdge
Service Provider
Posts: 518
Liked: 80 times
Joined: Dec 14, 2015 9:42 pm
Full Name: Alex F.
Contact:

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

Post by AlexLeadingEdge »

Nevermind, I've managed to figure out how to delete and re-add the certificate.
Post Reply

Who is online

Users browsing this forum: Semrush [Bot] and 1 guest