Environment

Identity Manager (IDM) 4.8

NetIQ eDirectory 9.2

Situation

User imported 3rd party certificate into eDirectory for using the certificate for communicating between IDM Engine and IDM Remote Loader.

When exporting the intermediate certificate or root certificate from the imported server certificate to base64 file (.b64) using Identity Console and putting the base64 file to IDM Remote Loader, the IDM driver still shows the following error message:

DirXML: [MM/DD/YY HH:MM:SS.mm]: 
DirXML Log Event -------------------
    Thread  = Subscriber Channel
    Level   = error
    Message = SSL protocol failure: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
DirXML: [MM/DD/YY HH:MM:SS.mm]: Loader: Waiting for DirXML to connect on 'TCP server socket, port 8190, address localhost, using TLS'...

The imported 3rd party certificate, some intermediate certificates and root certificate are not expired.

See full knowledge document on support portal