> Source: [sk181556](https://support.checkpoint.com/results/sk/sk181556)

# sk181556 - DataCenter Server object fails to connect with "Certificate Problem" error

| Property | Value |
|----------|-------|
| Solution ID | sk181556 |
| Date Created | 2023-10-26 |
| Last Modified | 2025-10-23 |
| Technical Level | Advanced |
| Products | Cloud Firewall |
| Versions | R81 (EOS), R81.10 (EOS), R81.20 |
| OS | Gaia |

## Symptoms

- * The output of the "`cpstat vsec`" command shows "`Certificate Problem`" error for the DataCenter Server object.

* In some cases, when you open the DataCenter Server object in question and select "`Test`", there are no issues.

* You can see similar logs in the *$MDS_FWDIR/log/cloud_proxy.elg* file without debugs enabled:

  `08/04/24 10:51:22,182 ERROR checkpoint.datacenter.Main [main]: === starting up ===
  08/04/24 10:51:24,050 ERROR util.certificate.DomainKeyStore [main]: Problem with loading file to keystore, file has possibly been corrupted.`
* You can see similar logs in the *$MDS_FWDIR/log/cloud_proxy.elg* file when taking CloudGuard Controller Debugs for the scanner parameters 
  based on [sk115657](https://support.checkpoint.com/results/sk/sk115657).

  `[DATE TIME] ERROR datacenter.scanner.PrivateCloudScannerProxy [enforcer_nasfwlcertlab01]: Data Center is not trusted on this domain: [DATA_CENTER_OBJECT]`  
  `
  [DATE TIME] INFO monitoring.smartlog.LogsWsImpl [enforcer_nasfwlcertlab01]: Log {"severity":"4","calc_desc":"IoT Discovery Service [DATA_CENTER_OBJECT] error. Assets imported are no longer being updated.","product":"IoT","data_center_name":"[DATA_CENTER_OBJECT]","gateway_name":""} was send to domain [UID_OF_DOMAIN]`  
  `
  [DATE TIME] ERROR datacenter.enforcement.DomainEnforcementUpdater [enforcer_nasfwlcertlab01]: IoT Discovery Service [DATA_CENTER_OBJECT] error. Assets imported are no longer being updated.`  
  `
  com.checkpoint.datacenter.util.exception.CMSOperationException: Cannot retrieve scanner id.`  
  `
  at com.checkpoint.datacenter.enforcement.DomainEnforcementUpdater.getEnforcementDataByIds(DomainEnforcementUpdater.java:32) [cms.jar:?]`  
  `
  at com.checkpoint.datacenter.enforcement.DomainEnforcementUpdater.updateDataCenterObjectsInfo(DomainEnforcementUpdater.java:37) [cms.jar:?]`  
  `
  at com.checkpoint.datacenter.enforcement.DomainEnforcementUpdater.run(DomainEnforcementUpdater.java:170) [cms.jar:?]`  
  `
  at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:522) [?:1.8.0]`  
  `
  at java.util.concurrent.FutureTask.run(FutureTask.java:277) [?:1.8.0]`  
  `
  at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160) [?:1.8.0]`  
  `
  at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) [?:1.8.0]`  
  `
  at java.lang.Thread.run(Thread.java:825) [?:2.9 (03-03-2022)]`  
  `
  [DATE TIME] DEBUG scanner.aci.AciScanner [enforcer_nasfwlcertlab01]: Trying to get certificate to uri: https://X.`

## Cause

A corruption in the *$FWDIR/conf/cmsCerts* file.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content