PSM session fails with error "get Error:Failed to read messages" (4228896)

Internet access is required for Java to check for Certificate revocation.

Both CRLs and OCSP require an internet connection to check certificate revocation status. 

If an outside internet connection will be permanently disabled and only intranet access allowed, the following steps will need to be completed:

1. Open Java Control Panel
2. Select Advanced tab
3. Find this setting Perform certificate revocation check on and set it to "Do not check(not recommended)".
   

Useful information from Java's website: Java Revocation Options

Please also see this related KB: When starting a PSM session you receive the below warning: "The connection to this website is untrusted" (210649)