Security Explorer- Could not establish trust relationship for the SSL TLS secure channel (4262911)

The information in this article applies to:

Security Explorer Version 7.5 and higher

SYMPTOM:

The underling connection was closed: Could not establish a trust relationship to the SSL/TLS secure channel. 

When trying to display site collections in Security Explorer SharePoint module the above error is returned.

Figure 1 

The underling connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

Figure 2 

CAUSE:

If the “Issued to” name of a certificate does not match the Internet Information Server/Host header name, Security Explorer will have problems listing the site collections.

In this example a Certificate is issued to pssLoadServer, the load balancing cluster name, figure 3).

Figure 3 

Internet Information Server name is WSDCMAIN, and the site to display is RetailSales, (figure 4).

Figure 4 

RESOLUTION:

To resolve this issue, add the site to the Favorites list by entering an Alternate Access Mapping (see details below) URL for the site and click “GO”:

Figure 5 

Click “yes” to confirm and add it to your Favorites list, (figure 6).

Figure 6 

The site should display now, (figure 7).

Figure 7 

Site displayed in Favorites, (figure 8).

Figure 8 

Alternate Access Mapping:

In the Central Administration Site, add an Internal URL to the Alternate Access Mapping Collection for the site. In this example it is “https://pssloadserver:18133”

In this example the name of the Alternate Access URL also matches the load balancing cluster name, because that is the “Issue to” name on the certificate.

Figure 9 

DNS shows the host name of the Load balancing cluster name.

Figure 10