MSR:certificate signed by unknown authority

I’m trying to setup MSR, but keep on getting error

ERRO[0014] Reconfigure encountered an error, exiting: failed to get new conv client: failed to create MKE client from MKE opts: Failed to determine health of MKE: polling failed with 10 attempts 1s apart: Get “https://xxxxx/_ping”: x509: certificate signed by unknown authority

I have checked certificate is valid, also added those in /etc/ssl/certs

openssl verify -CAfile UCP-Root.pem UCP-intermediate.pem
UCP-intermediate.pem: OK

Able to open mke web UI and it shows certificate valid.

Since MSR is part of the Mirantis Enterprise offering, I would suggest to raise a support ticket @ Mirantis.