If you are rolling out new laptops and users keep seeing this error, the issue is almost always missing root certificates in your golden image.
Deploy this via GPO, JAMF, or Intune:
Once you resolve the error, take these steps to avoid a recurrence: globalprotect vpn failed to verify certificate
If the GlobalProtect gateway is using a self-signed certificate (common in labs/testing), clients will reject it by default. If you are rolling out new laptops and
Solutions: