> Source: [sk162363](https://support.checkpoint.com/results/sk/sk162363)

# sk162363 - Unable to log in Remote Access VPN when Machine Authentication is required

| Property | Value |
|----------|-------|
| Solution ID | sk162363 |
| Date Created | 2019-10-07 |
| Last Modified | 2020-11-12 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * When using machine authentication users are unable to authenticate the Remote Access VPN.
* Error "Can't retrieve the Root CA for the cert".
* Client logs show:

  ```
  [ 7252 12972][29 Aug 12:13:53][RaisCertManager] RaisCertManager::CertManager::GetCertByName: Can't retrieve the Root CA for the cert.
  
  [ 7252 12972][29 Aug 12:13:53][RaisCertManager] RaisCertManager::CertManager::GetCertByName: temp_cert is null!! => No cert was found with the given cert_name= 
  ```

## Cause

When using Machine Authentication, the Root Certificate is required to authenticate the machines that are logging in using machine authentication. Without it users will not be able to identify the machine cert to Check Point, as it will have no reference to what CA to authenticate to.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content