GDS CA Certificate Management. Does this need manual movement of Certificate?|OPC UA Implementation: Stacks, Tools, and Samples|Forum|OPC Foundation

I am using the OPCFoundation GDS Sample.

I registered UacppServer with GDS via GDS Client – Server Push Management option .Clicked then connect option under Server status. Clicked the GenerateNew option in the Certificate tab to generate a new certificate. Followed by ApplyChanges. Then clicked the “MergedWithGDS” followed by “PushToServer” option in the TrustList.

Similar way I registered an OPCFoundation Quickstart sample Client with GDS.

After me registering the Client and Server with GDS, I expect the Client shall connect with Server without any issue, but I got “BadSecurityCheckFailed” Error in the Client Side during the connection. It worked after manually moving the certificate from Rejected to Trust folder.

My Doubt here is why we need the manual as both the client and server already has the GDS Signed Certificate in it Trust and Issuer Folder.

Appreciate your inputs on my query.

Thank you.