> Source: [sk166095](https://support.checkpoint.com/results/sk/sk166095)

# sk166095 - Remote Access Machine Authentication fails with "Client machine identification failed" error

| Property | Value |
|----------|-------|
| Solution ID | sk166095 |
| Date Created | 2020-12-18 |
| Last Modified | 2021-11-15 |
| Technical Level | General |
| Products | Security Gateway, Endpoint Security |
| Versions | R82.10, R82, R81.20, Cloud, E89.X, E88.X |

## Symptoms

- * Remote Access Machine Authentication fails with "`Client machine identification failed`" error.
* `$FWDIR/log/ike.elg` shows that the machine certificate was received with an empty subject.
* `vpnd.elg` shows an empty, or unexpected section of the DN:

  ```
  
  validate_machine_name: comparing machine name = $name$ with machine_dn = validate_machine_name: machine name = 
  create_login_log: Peer Machine DN not available
  [CPLOG] CCplogUtils::FillVarArg: str: Client machine identification failed
  ```

  OR

  ```
  
  validate_machine_name: comparing machine name = MACHINEID with machine_dn = CORPNAME
  ```

  <br />

## Cause

The Subject field of a machine certificate must not be empty. Refer to page 113 of the [Remote Access VPN R80.40 Administration Guide](https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_RemoteAccessVPN_AdminGuide/Topics-VPNRG/Check-Point-VPN.htm).

The Subject field of a machine certificate must also be ordered with the CN coming first.

## Solution

This is not a Check Point issue.  

Re-create the certificate with a subject, and an expected DN ordering.  

<br />

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content