Azure VPN 客户端 (MacOS) 由于错误而无法连接：getKeyChainSecret

Question

我今天花了几个小时试图找到解决方案，但我的 Azure VPN 客户端似乎无法在我的 MacOS 钥匙串中创建令牌凭据。多名同事能够在类似的 Mac 上进行连接，没有出现任何问题。这是客户端故障，因为我可以使用我的凭据和此配置文件访问另一台 Mac 上的 VPN。以下是连接日志。

02/27/2023 20:37:17 Information getClientAuthLoginCredentials: Using account: com.microsoft.AzureVpnMac
02/27/2023 20:37:17 Error getKeyChainSecret: Failed to retrieve KeyChain secret. Status code -25300
02/27/2023 20:37:17 Error handleAADClientAuthCachedUser: There is no last used account Username saved in KeyChain for VpnConnection: Remote-Site AAD Auth!
02/27/2023 20:37:17 Information sAcquireTokenInteractivelyNeeded: Account is not saved so interactive login will be needed.
02/27/2023 20:37:17 Error IsAcquireTokenInteractivelyNeeded: No AAD token acquired silently, Interactive login is required!
02/27/2023 20:37:17 Information removeClientAuthLoginCredentials: Using account: com.microsoft.AzureVpnMac
02/27/2023 20:37:17 Information getClientAuthLoginCredentials: Using account: com.microsoft.AzureVpnMac
02/27/2023 20:37:17 Error getKeyChainSecret: Failed to retrieve KeyChain secret. Status code -25300
02/27/2023 20:37:17 Warning removeClientAuthLoginCredentials: Failed to retrive previously saved ClientAuth: aad secret  for Vpn connection: Remote-Site, so no cleanup is needed!
02/27/2023 20:37:17 Information IsAcquireTokenInteractivelyNeeded: Cleared saved AAD auth login account Username from KeyChain as user will need to do interactive login to acquire AAD token.
02/27/2023 20:37:17 Information Acquiring AAD token interactively...
02/27/2023 20:37:19 Information Successfully Received AAD Credential Token. User: REDACTED@Remote-Site
02/27/2023 20:37:19 Information Saving AAD User Account
02/27/2023 20:37:20 Information Dialing VPN connection Remote-Site
02/27/2023 20:37:20 Information Dialing VPN connection Remote-Site, Status = Success
02/27/2023 20:37:20 Information removeClientAuthLoginCredentials: Using account: com.microsoft.AzureVpnMac
02/27/2023 20:37:20 Information getClientAuthLoginCredentials: Using account: com.microsoft.AzureVpnMac
02/27/2023 20:37:20 Error getKeyChainSecret: Failed to retrieve KeyChain secret. Status code -25300
02/27/2023 20:37:20 Warning removeClientAuthLoginCredentials: Failed to retrive previously saved ClientAuth: aad secret  for Vpn connection: Remote-Site, so no cleanup is needed!

您会注意到倒数第二条消息是“无法检索钥匙串秘密”。 非常感谢任何帮助！

我尝试过卸载、完全清理，然后重新安装。我已手动将凭据添加到钥匙串中，但 VPN 客户端随后给出了有关“无法更改钥匙串凭据的所有权”的错误。我已删除并重新导入 Azure VPN 配置文件 XML。我让同事导出他们的个人资料并尝试导入它，但出现同样的问题。

Answer 1

我们的 Mac 也有同样的问题！ 我们的解决方案是在

certification information

部分下选择正确的

server validation

。

之前我选择了

Microsoft ECC ***

证书并收到上述错误。

切换到

DigiCert Global Root G2

证书后即可建立连接。

Answer 2

我有完全相同的问题，上述解决方案也不起作用...有人有其他想法吗？