Authentication Failure When Using a VPN

 

Overview

Certain corporate VPN solutions (such as Zscaler) perform SSL/TLS inspection, intercepting traffic and re-encrypting it with a different certificate.

 

Issue

PRA does not recognize the substituted certificate, causing authentication to fail.

 

Solutions

 

Option 1 — Recommended: Exclude PRA from VPN inspection

Contact IT support and request that PRA (pra.exe) is added to the VPN exclusion or whitelist.

• This prevents the VPN from inspecting PRA traffic.

 

 

Option 2 — Add VPN root certificate to PRA

If exclusion is not possible, the VPN provider's root certificate authority must be added to PRA's trusted certificate store via InstallCert.

This is an IT-level task.

Note: Do not attempt to modify VPN settings without IT support involvement.

 

Troubleshooting

• Confirm the issue is VPN-related by testing PRA while disconnected from the VPN. If PRA connects successfully without the VPN, the VPN is the cause.
• If Option 1 is implemented but the issue persists, verify the exclusion has been applied to the correct executable path.