Monitoring and reporting for Veeam Data Platform
Post Reply
AlexLeadingEdge
Service Provider
Posts: 518
Liked: 80 times
Joined: Dec 14, 2015 9:42 pm
Full Name: Alex F.
Contact:

ERR_SSL_KEY_USAGE_INCOMPATIBLE

Post by AlexLeadingEdge »

Hi guys,

I'm trying to change my notification email provider to Microsoft 365, but when I log into Microsoft 365 I get the error ERR_SSL_KEY_USAGE_INCOMPATIBLE

ChatGPT tells me it is because the self-signed certificate that VeeamONE version 12.3.0.4670 is using doesn't have "DigitalSignature".
Your cert’s Key Usage is:

DataEncipherment, KeyEncipherment

Missing DigitalSignature

Modern TLS (especially TLS 1.2/1.3 in browsers) expects the server cert to be permitted for Digital Signature (for the handshake). Without it, Chrome throws ERR_SSL_KEY_USAGE_INCOMPATIBLE even though EKU says “Server Authentication”.

So the fix is: replace the certificate with one that includes DigitalSignature (and usually KeyEncipherment), then rebind port 1239.
Is there a way to update / upgrade the certificate?
AlexLeadingEdge
Service Provider
Posts: 518
Liked: 80 times
Joined: Dec 14, 2015 9:42 pm
Full Name: Alex F.
Contact:

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

Post by AlexLeadingEdge »

Nevermind, I've managed to figure out how to delete and re-add the certificate.
jorgedlcruz
Veeam Software
Posts: 1817
Liked: 798 times
Joined: Jul 17, 2015 6:54 pm
Full Name: Jorge de la Cruz
Contact:

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE

Post by jorgedlcruz »

Glad to hear everything is working, Alex, did you use any of our public articles? Maybe if you share it it can help someone in the future.

Thank you
Jorge de la Cruz
Director Observability & AI Product Management | Veeam ONE @ Veeam Software

@jorgedlcruz
https://www.jorgedelacruz.es / https://jorgedelacruz.uk
vExpert 2014-2025 / InfluxAce / Grafana Champion
Post Reply

Who is online

Users browsing this forum: Bing [Bot] and 5 guests