# SSL Cert and mobile QR-Code Questions **URL:** \ **Category:** Installation Issues\ **Created:** [May 26, 2026, 2:47pm UTC](https://community.passbolt.com/t/ssl-cert-and-mobile-qr-code-questions/14382 "2026-05-26T14:47:46Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![TasteOfIT](https://avatars.discourse-cdn.com/v4/letter/t/ecc23a/32.png) [@TasteOfIT](https://community.passbolt.com/u/TasteOfIT)\ **Post date:** [May 26, 2026, 2:47pm UTC](https://community.passbolt.com/t/ssl-cert-and-mobile-qr-code-questions/14382/1 "2026-05-26T14:47:46Z")
**Hi,** i have installed latest passbolt ce as docker container behind nginx. So far its working well and latest updates are installed successfull. Now i want to test the mobile app on my android device. I go to my profile and want to scan the qr-code, but i got error. As far as i can see in the debug logs, the certificate is a problem. I use for nginx lets encrypt, but have nothing configured in the .yml file. So i think passbolt ce uses its own cert, right? What can i do to make it work? Should i simple add the certs in the .yml and rebuild the app? thx ---
**Author:** ![TasteOfIT](https://avatars.discourse-cdn.com/v4/letter/t/ecc23a/32.png) [@TasteOfIT](https://community.passbolt.com/u/TasteOfIT)\ **Post date:** [June 11, 2026, 10:24am UTC](https://community.passbolt.com/t/ssl-cert-and-mobile-qr-code-questions/14382/2 "2026-06-11T10:24:32Z")
Ok i could solve it. I have to use the full chain in nginx ssl configuration. Now i can scan the QR-Code from my Android, BUT after that i have to enter the TOTP Code, which i have not configured. So One step back and i try to configure TOTP. After Activating TOTP, i cant see the QR-Code for scanning on my Android in Authenticator, like i know from other provider. NEW PROBLEM! - NO QR-Code in TOTP User enable configuration - NEED HELP! - no adblock or any error in dev console - i use latest firefox on linux mint ---
**Author:** ![gyaresu](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/gyaresu/32/5320_2.png) [@gyaresu](https://community.passbolt.com/u/gyaresu)\ **Post date:** [June 11, 2026, 2:16pm UTC](https://community.passbolt.com/t/ssl-cert-and-mobile-qr-code-questions/14382/3 "2026-06-11T14:16:26Z")
G’day TasteOfIT, Good work on the full chain fix. The extension and mobile app both do strict chain validation, so `fullchain.pem` is the right cert to serve. On the blank QR: the fact that your mobile app asked for a TOTP code after pairing is actually useful. It means TOTP is already enabled at the organisation level, so that’s not the issue. The QR image is generated inside the **extension’s background page** , not the web page itself. This means if the setup request fails, no error will appear in the F12 console you checked. The error will only show in the extension’s own console. To check it in Firefox: 1. Open `about:debugging` in a new tab 2. Click “This Firefox” on the left 3. Find passbolt in the extensions list and click Inspect 4. In the console that opens, go back to the TOTP setup screen and watch for any errors Before doing that, it is also worth doing a full browser restart first. The extension validates your API certificate independently, and after a cert change it can end up in a state where the setup request fails with no visible error. A restart clears it. One sanity check: make sure you are on your own **profile** Multi Factor Authentication page (the one under your user avatar), not the one under Organisation Settings. The org settings screen enables the provider for the organisation but shows no QR code. If you do find an error in the extension console, paste it here and we can go from there. Chat soon Gareth ---
**Author:** ![TasteOfIT](https://avatars.discourse-cdn.com/v4/letter/t/ecc23a/32.png) [@TasteOfIT](https://community.passbolt.com/u/TasteOfIT)\ **Post date:** [June 11, 2026, 2:33pm UTC](https://community.passbolt.com/t/ssl-cert-and-mobile-qr-code-questions/14382/4 "2026-06-11T14:33:12Z")
Hi Gareth, and thanks for your reply with lots of information and help. I am a step further. I have checked the ms authenticator app on my android, and i allready setup MFA on that phone. So i could finaly use it and add my vault to my android. BUT in the Profile: - TOTP is still shown as deactivated - maybe its correct but confusing - the QR-Code in TOTP is still not shown, and that should, right, because of any other device like a tablet i would use too - and it would be nice to see device information from connected mfa devices, but thats maybe a feature request 🙂 I tested the missing QR-Code on a second machine with win11 and firefox and have the same missing image. ---
**Author:** ![gyaresu](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/gyaresu/32/5320_2.png) [@gyaresu](https://community.passbolt.com/u/gyaresu)\ **Post date:** [June 12, 2026, 12:03am UTC](https://community.passbolt.com/t/ssl-cert-and-mobile-qr-code-questions/14382/5 "2026-06-12T00:03:44Z")
G’day TasteOfIT, The “Disabled” status is correct before enrollment. TOTP only flips to “Enabled” once you have scanned the QR and entered a valid code to confirm the link, so that part is behaving as expected. The two-machine result is the useful piece here. A fresh Win11 + Firefox install has no prior cert history, so a stale extension state is not the cause on that machine. That points to the request from the extension to the server either failing or returning something unexpected. That request runs inside the extension background page, not the browser tab you have open. Errors only appear in the extension’s own inspector, not the F12 console on the page. To check it on the Win11 machine: 1. Open `about:debugging` in Firefox 2. Click **This Firefox** on the left 3. Find passbolt in the extensions list and click **Inspect** 4. Load the TOTP setup screen in your other tab 5. Copy any errors that appear in the inspector console Paste them here and we can take it from there. On the device list idea: that is worth posting in the Feature requests section of the forum so the product team can track it: [https://community.passbolt.com/c/backlog/6](https://community.passbolt.com/c/backlog/6) Chat soon Gareth