WCC - AutoSys Web Server Validation Failed - E190098 PKIX path building failed

Products

• CA Workload Automation AE - Scheduler (AutoSys)
• CA Workload Automation AE

Issue/Introduction

After updating the AutoSys Web Server to use a CA-signed certificate, the AutoSys server will no longer validate in WCC. The following error is displayed when attempting the validation:

Error: E190098 ACE (web services validation) - A connection exception was encountered: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

Environment

Release : AutoSys - 11.3.6 SP6 or higher / WCC 11.4 SP6 or higher

Component : CA Workload Automation AE (AutoSys)

Cause

After changing the AutoSys Web Server certificate from the default self-signed certificate to a CA-signed certificate, the new certificate must be imported into the WCC keystore.

Resolution

Access the following URL using a browser from your local desktop...

https://<web_server_host>:9443/AEWS/application.wadl

Provide valid credentials for the Web Server and make sure you see xml content.

Use the browser-specific method for viewing the certificate and then click on the "Details" tab.

Click on the "Copy to File" button to save the certificate to a file on your local machine.

Upload the file to a temporary directory on your WCC server.

Login to the WCC server and stop the WCC services.

Go to <WCC_INSTALL_DIRECTORY>/data/config and make a backup of the .keystore file.
 
Go to <WCC_INSTALL_DIRECTORY>/jre/bin and run the following command...

./keytool -import -trustcacerts -file <certificate_file> -keystore  WCC_INSTALL_LOCATION/data/config/.keystore

<certificate_file> will be the path and file name of the copied certificate file from above.

Restart WCC services.