05-21-2018 11:32 AM
I agree. The problem is that Google changed CA's, and Canon has yet to update the firmware with the new GlobalSign CA's registered.
The 8500's let you upload cert files & register them. I assume this is mostly for enterprise funcitonality. In my case, I was desperately looking for a certificate file format the 8580 would swallow. So I went looking for sources. Because I'm pretty adept at MacOS, I knew Keychain Access was a possible source. So I went trolling for exports from KA for anything GlobalSign, and I discovered a format the printer would import.
I suspect all the Canon was missing was some sort of public key for GlobalSign's CA.
I can barely follow all the technicals you mentioned. I'm a total novice at encryption concepts. I just found a procedure that solved the problem I needed solved, and it didn't seem to matter whether or not SSL was enabled in the machine.
05-24-2018 04:43 PM
Thanks for the pointer to the CA certs!
Which certificates did you have to import to make it work in the end?
This is what I have now:
|C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA||C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA||28/01 2028 14:00:00|
|OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign||OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign||18/03 2029 12:00:00|
|OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign||OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign||15/12 2021 10:00:00|
The certificate chain for google.com is
Certificate chain 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=*.google.com i:/C=US/O=Google Trust Services/CN=Google Internet Authority G3 1 s:/C=US/O=Google Trust Services/CN=Google Internet Authority G3 i:/OU=GlobalSign Root CA - R2/O=GlobalSign/CN=GlobalSign
so I assume only the R2 one is needed, but I still get the "Failed to acquire information for registration." error.
05-25-2018 03:21 PM
My understanding was that the R2 was the only one needed as well. But I honestly can't remember which one did the trick. I went ahead and installed all of them thinking it coudn't hurt. :-)
Glad it was helpful to someone else.
05-26-2018 11:18 PM
Thank you JettCA11.
I have Canon MF8200C Series printer. Model is Canon imageCLASS MF8280Cw
I updated the firmware, it did not work
This has been frustrating problem I had from Jan of this year.
The errors I saw on the remote UI were:
"Failed to acquire information for registration"
"Could not perform server authentication"
Installing the certificate (Global Sign R2) allowed the registration and cloud print is working now.
Please note that I tried to export the cer file from internet explorer and firefox and it did not work. I had to extract the cer file from MAC and upload it.
06-12-2018 03:28 PM - edited 06-23-2018 01:39 PM
Yes, you are right, It only worked when I uploaded and registered the GlobalSign Root CA - R2 certificate.
R3 and the plain Root CA did not work but I left them there anyway.
This is the only current solution to this problem based on my research online.
Thanks a ton.
06-23-2018 01:37 PM - edited 07-04-2018 03:28 PM
This solution worked perfectly for me. Apparently, Google has changed the CA they use, and you need to update the CA certs. I use Windows, so I used the Cert Mgr. Had to export all 3 Global Sign certs, using the defaults, then import and register them with your printer. Once that's done, restart the printer, and re-register Google Cloud Print. Works fine. Thank you!!
07-05-2018 09:21 AM
The Global Sign R2 worked for me also and I don't understand why Canon has not provided the public file for this Certificate. I went to Global Sign R2 and saw that Google owns that cert now. Went to Google Trust Services and downloaded the GS Root R2 (DER) then I needed to convert it to a .cer file from .crt file using directions from here.
With the .cer file you need to Login to your printer Remote UI by going to the Printer IP address on your network. If you haven't set the password you just hit enter after clicking System Manager Mode.
Click - Settings Registration then Security Settings
Click - CA Certificate Settings
Click - Register CA Certificate
Browse to the .cer you saved and install and register.
Then make sure Google Cloud Print is on under Network Settings in the System Management Settings and Restart the printer. I hope this helps.
If Canon monitors this forum you may want to give your service reps this file. I spent half a day with a very nice support rep about 2 months ago and ended up using the CUPS print option for my Chromebooks. Finally I followed the advice of this thread and have Google Print working.