# Unable to access Zero console due to certificate failure

**URL:** <https://discuss.pomerium.com/t/unable-to-access-zero-console-due-to-certificate-failure/433>\
**Category:** Support\
**Created:** [November 20, 2024, 5:11pm UTC](https://discuss.pomerium.com/t/unable-to-access-zero-console-due-to-certificate-failure/433 "2024-11-20T17:11:22Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![singram](https://avatars.discourse-cdn.com/v4/letter/s/da6949/32.png) [@singram](https://discuss.pomerium.com/u/singram)\
**Post date:** [November 20, 2024, 5:11pm UTC](https://discuss.pomerium.com/t/unable-to-access-zero-console-due-to-certificate-failure/433/1 "2024-11-20T17:11:22Z")

</div>

I tried to login to Pomerium Zero site by clicking Login on the home page and also just entering [https://console.pomerium.app](https://console.pomerium.app) in the browser. I expected to see the login form and be able to login to my account, but received this error:

 ![Screenshot 2024-11-20 at 9.02.04 AM](https://canada1.discourse-cdn.com/flex031/uploads/pomerium/original/1X/9f6bea55ea1c5021f6472ab0f4e3d816f0941d03.png)

Since there is bypass, I can’t visit the site at all and login. Is this not the correct URL? When I pretend like I’m a new customer and want a Zero account, I get the same error.  
I’m on a Mac and have tried Safari, Firefox and Chrome all without success. It has been awhile since I’ve logged in so perhaps there was a version upgrade or something?

---

<div class="post-metadata">

**Author:** ![calebdoxsey](https://avatars.discourse-cdn.com/v4/letter/c/7bcc69/32.png) [@calebdoxsey](https://discuss.pomerium.com/u/calebdoxsey)\
**Post date:** [November 20, 2024, 6:13pm UTC](https://discuss.pomerium.com/t/unable-to-access-zero-console-due-to-certificate-failure/433/2 "2024-11-20T18:13:09Z")

</div>

That’s odd. It should be serving a valid google-provided certificate. Could you export the certificate details? (click the X Not Secure button and there’s a button where you can see the cert details)

---

<div class="post-metadata">

**Author:** ![singram](https://avatars.discourse-cdn.com/v4/letter/s/da6949/32.png) [@singram](https://discuss.pomerium.com/u/singram)\
**Post date:** [November 20, 2024, 6:43pm UTC](https://discuss.pomerium.com/t/unable-to-access-zero-console-due-to-certificate-failure/433/3 "2024-11-20T18:43:10Z")

</div>

Strange and I thought so too, but I’m seeing a Cisco cert.

 ![Screenshot 2024-11-20 at 10.41.20 AM](https://canada1.discourse-cdn.com/flex031/uploads/pomerium/original/1X/c641e4b331fe65bf74d4b3e441596f1ca1552824.png)

---

<div class="post-metadata">

**Author:** ![calebdoxsey](https://avatars.discourse-cdn.com/v4/letter/c/7bcc69/32.png) [@calebdoxsey](https://discuss.pomerium.com/u/calebdoxsey)\
**Post date:** [November 20, 2024, 7:42pm UTC](https://discuss.pomerium.com/t/unable-to-access-zero-console-due-to-certificate-failure/433/4 "2024-11-20T19:42:10Z")

</div>

I think Cisco Umbrella might be blocking access. I’m not familiar with this product, does it rewrite DNS entries to point to a different server?

---

<div class="post-metadata">

**Author:** ![singram](https://avatars.discourse-cdn.com/v4/letter/s/da6949/32.png) [@singram](https://discuss.pomerium.com/u/singram)\
**Post date:** [November 20, 2024, 8:05pm UTC](https://discuss.pomerium.com/t/unable-to-access-zero-console-due-to-certificate-failure/433/5 "2024-11-20T20:05:35Z")

</div>

Indeed. I was finally able to test on a non-OpenDNS network and Cisco is blocking the site for “phishing” reasons. Not sure what that amounts too, but I did submit a request to have it removed telling them Pomerium is a legitimate company and this is a service login. Hopefully they will resolve this. Thanks for your help in highlighting the problem!

---

<div class="post-metadata">

**Author:** ![singram](https://avatars.discourse-cdn.com/v4/letter/s/da6949/32.png) [@singram](https://discuss.pomerium.com/u/singram)\
**Post date:** [November 30, 2024, 7:28pm UTC](https://discuss.pomerium.com/t/unable-to-access-zero-console-due-to-certificate-failure/433/6 "2024-11-30T19:28:40Z")

</div>

So Pomerium is still blocked by Cisco Umbrella. I’m not sure why this isn’t causing problems for others, but perhaps the Pomerium folks need to get involved since my request for removal was apparently ignored or rejected. Is there someone to contact for support?
