Unable to use certificate auth against a cluster with CA singed cert's

[madboss89]

Getting permission denied. Do I need to create a rest role as well here, not use why Permission denied.
-11eb-b1e0-00a098b9924b Version:9.15.1 Release:NetApp Release 9.15.1P2: Tue Aug 27 16:35:16 UTC 2024 Serial: IsSanOptimized:false IsDisaggregated:false ZAPIsExist:true HasREST:false IsClustered:true}" error="StatusCode: 403, Error: Permission denied, API: /api/cluster?fields=%2A&return_records=true"
time=2026-01-13T00:47:59.470-06:00 level=WARN source=poller.go:1557 msg="ONTAP connection failed, skipping ONTAP collectors" Poller=ABCD
time=2026-01-13T00:47:59.470-06:00 level=WARN source=poller.go:344 msg="no collectors initialized, stopping" Poller=ABCD
time=2026-01-13T00:47:59.471-06:00 level=INFO source=poller.go:673 msg="stopping poller" Poller=ABCD pid=1495489
exit status 1

`ABCD::*> security login show Madhu

Vserver: ABCD
Second
User/Group Authentication Acct Authentication
Name Application Method Role Name Locked Method

---

Madhu http cert Madhu - none
Madhu http password Madhu no none
Madhu ontapi cert Madhu - none
Madhu ontapi password Madhu no none
4 entries were displayed.

ABCD::*> security login role show Madhu
Role Command/ Access
Vserver Name Directory Query Level

---

ABCD
Madhu DEFAULT readonly

`

[madboss89]

I was able to resolve, it was a issue with CN user

[cgrinds]

Thanks for the update @madboss89 Glad that you got it working