G DATA MXDR
No TLS-encrypted connection to chess.gdatasecurity.de is possible. What can I do?
If you cannot establish a TLS-encrypted connection to chess.gdatasecurity.de, this may be due to a missing root certificate. You need the appropriate root certificate in the Windows Trusted Root Certification Authorities store.
| Normally, this certificate is updated via Windows Updates. In isolated environments, or in environments where Windows Updates are distributed via WSUS or other patch management systems, it has occurred more frequently in the past that root certificate updates are not performed regularly. |
Which root certificate is required (as of July 2026)?
You need the certificate Sectigo Public Server Authentication Root R46 with the following SHA-1 fingerprint.
AD98F9F3E47D753B65D482B3A45217BB6EF5E438In Windows, you can use the following command to check whether the certificate is present.
Get-ChildItem -Path Cert:\LocalMachine\Root | Where-Object { $_.Thumbprint -eq "AD98F9F3E47D753B65D482B3A45217BB6EF5E438" }If the certificate is not present, you can download it from the following page: https://www.sectigo.com/knowledge-base/detail/Sectigo-Root-Certificates To do so, search the specified page for "Sectigo Public Server Authentication Root R46" and download the appropriate certificate. Store it in the Windows Trusted Root Certification Authorities store.