Once you resolve the error, take these steps to avoid a recurrence:
This guide steps through causes and fixes for the GlobalProtect error “Failed to verify certificate.” Follow steps in order; try a reconnect after each major change. globalprotect vpn failed to verify certificate
Important assumption: you have admin rights on your device or can ask your IT team to perform changes that require admin access. Once you resolve the error, take these steps
You might be connecting to vpn.company.com, but the certificate is issued to globalprotect.company.com. This guide steps through causes and fixes for
Fix: Check the portal address in your GlobalProtect app settings. Ensure it matches the Common Name (CN) or Subject Alternative Name (SAN) on the certificate (your IT team can verify the correct hostname).
Add <verify-cert>no</verify-cert> in the config — only for troubleshooting.