GSA Windows client health check
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 47793d9 · +3 −3 lines · also on GitHub
⋯ 45 unchanged lines
4646
To check the status of your device, enter the following command in the Command Prompt: `dsregcmd.exe /status`.
4747
:::image type="content" source="media/troubleshoot-global-secure-access-client-diagnostics-health-check/troubleshoot-health-entra-joined.png" alt-text="Screenshot of the Command Prompt with the Device State, AzureAdJoined : Yes, highlighted.":::
4848
49
−### Can Connect to the internet
49
+### Can connect to the internet
5050
This check indicates whether or not the device is connected to the internet. The Global Secure Access client requires an internet connection. This test is based on the [Network Connectivity Status Indicator (NCSI)](/windows-server/networking/ncsi/ncsi-overview) feature.
5151
5252
### Tunneling service running
⋯ 84 unchanged lines
137137
1. Launch the Microsoft Management console by entering the following command in the Command Prompt: `certlm.msc`.
138138
1. In the **certlm** window, navigate to **Personal** > **Certificates**.
139139
1. Delete the certificate that ends with **gsa.client**, if it exists.
140
−:::image type="content" source="media/troubleshoot-global-secure-access-client-diagnostics-health-check/troubleshoot-health-check-gsa-client.png" alt-text="Screenshot of the list of certificates with the gsa.client certificate highlighted.":::
140
+:::image type="content" source="media/troubleshoot-global-secure-access-client-diagnostics-health-check/troubleshoot-health-check-certificates-registry-key.png" alt-text="Screenshot of the list of certificates with the gsa.client certificate highlighted.":::
141141
1. Delete the following registry key:
142142
`Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Global Secure Access Client\CertCommonName`
143143
1. Restart the Global Secure Access Management Service in the services MMC.
⋯ 11 unchanged lines
155155
1. Launch the Microsoft Management console by entering the following command in the Command Prompt: `certlm.msc`.
156156
1. In the **certlm** window, navigate to **Personal** > **Certificates**.
157157
1. Delete the certificate that ends with **gsa.client**.
158
−:::image type="content" source="media/troubleshoot-global-secure-access-client-diagnostics-health-check/troubleshoot-health-check-gsa-client.png" alt-text="Screenshot of the list of certificates with the gsa.client certificate highlighted.":::
158
+:::image type="content" source="media/troubleshoot-global-secure-access-client-diagnostics-health-check/troubleshoot-health-check-certificates-registry-key.png" alt-text="Screenshot of the list of certificates with the gsa.client certificate highlighted.":::
159159
1. Delete the following registry key:
160160
`Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Global Secure Access Client\CertCommonName`
161161
1. Restart the Global Secure Access Management Service in the services MMC.
⋯ 180 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:46 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.