Error: Get https://s3.amazonaws.com: x509: certificate signed by unknown authority

Symptoms

When configuring a Cloud Connector VM via the interactive console, administrators are required to apply the network settings before they take effect. Upon doing so, the Cloud Connector VM will run a validation test to ensure proper network prerequisites are met for VM-to-cloud connectivity.

As part of the required network prerequisites, administrators will need to ensure that all outbound TCP 443 connections from the Cloud Connector VM to the internet are SSL-whitelisted. In the event that a network proxy or firewall attempts a man-in-the-middle "MITM" decryption of the session, the following error will be seen:

Failed to apply configuration

• Get https://s3.amazonaws.com: x509: certificate signed by unknown authority

Resolution

To resolve this failure, administrators should ensure that any network proxy or firewall between the Cloud Connector VM and the internet is configured to allow all outbound TCP connections from the Cloud Connector VM to be SSL-whitelisted.