Remediation

Certificate verification failures can be remediated in several ways.

Important: The SSL Incident List is the primary vehicle for investigating verification failures. To effectively use the CVE, administrators must become fluent with the Incident List facility. Help system information starts here.

The primary remediation options include:

    1. Correcting the certificate problem. See Troubleshooting Certificate Verification Failures and SSL trusted certificate store.
    2. Bypassing certificate verification via SSL Decryption bypass, the SSL Incident List, or another bypass option. See Bypass options.
    3. Enabling or disabling CVE options.
    4. Using the CVE Verification Bypass option to give users the ability to proceed to a site after certificate verification fails.