How do I fix a Traps server certificate error?

Symptom
The following error appears in the services.log on the endpoint:
“An error occurred while making the HTTP request to https://<hostname>:2125/CyveraServer/. This could be due to the fact that the server certificate is not configured properly with HTTP.SYS in the HTTPS case. This could also be caused by a mismatch of the security binding between the client and the server.”
Possible Causes
When installing the ESM Server software, the following certificate configuration settings are available: No Certificate (No SSL) and External Certificate (SSL). To install Traps, you must select SSL if you selected External Certificate during the ESM Server software installation or No SSL if you selected No Certificate. The mismatch in settings causes the error reported to the service.log.
Solution
  1. Reinstall the Traps software.
    Verify the SSL settings for the ESM Server and then reinstall Traps on the endpoint, taking care to select the appropriate SSL setting during installation (see Install Traps on Windows Endpoints).
  2. Verify that the error doesn’t appear in the log.
    From the Traps Console, select Open Log File, or open the services.log on the endpoint and review any recent errors. If the server certificate error persists, contact Palo Alto Networks support.

Related Documentation