The registration cannot be validated. Policy Manager Server could not connect to the WithSecure registration server

Issue:

When trying to register a Policy Manager Server, we are getting this error: The registration cannot be validated. WithSecure Policy Manager Server could not connect to the WithSecure registration server (https://corp-reg.fsapi.com)

Resolution:

What should I do if registration fails, saying that my customer number could not be validated?

The first thing you shoul do, if you get this error message, is to check that you are running a supported version of Policy Manager Server. Check that the Policy Manager version you are running on your server isnot listed as end-of-life: https://www.withsecure.com/en/support/product-lifecycle-announcements

If your Policy Manager Server is supported, check your network configuration to make sure that Policy Manager Server is able to access the registration server.

version 15: https://corp-reg.f-secure.com
version 16: https://corp-reg.fsapi.com

Steps to test the connectivity from the same host where Policy Manager Server is installed:

You need Command Prompt and curl.exe to run the following command:
curl https://corp-reg.fsapi.com
- Connection can be treated as successful if you get the html output containing the following:
  <title>Error 404 Not Found</title>
  <body><h2>HTTP ERROR 404 Not Found</h2>
- If you use a HTTP proxy, test the connectivity via this proxy:
  curl https://corp-reg.fsapi.com --proxy [protocol://]proxy_address[:port]
- If you cannot use curl, try to access https://corp-reg.fsapi.com via Browser
- Make sure that TLSv1.2 has been enabled. If yes, check and remove the value from additionalJavaArgs and restart fspms service
  - -DhttpsExcludedProtocols=TLSv1.2
If the connection is blocked, make sure you have allowed the DNS names *. f-secure.com and*. fsapi.com to your firewall, as described here.
If the browser test is showing that the site is not trusted, it would mean that your host does not trust Amazon Root CA 1 root certificate or intermediate ones.
If you are using a HTTP proxy, please configure it in the fspms.proxy.config. After the configuration, restart the Policy Manager Service. Depending on the Policy Manger versions and operating system the config file is located at:
- Windows:
  - version 15: C:\Program Files (x86)\F-Secure\Management Server 5\data\fspms.proxy.config
  - version 16: C:\ProgramData\WithSecure\NS\Policy Manager\Policy Manager Server\data\fspms.proxy.config
- Linux: /var/opt/f-secure/fspms/data/fspms.proxy.config

Article no: 000013849