WCC - AutoSys Web Server Validation Failed - E190098 PKIX path building failed
search cancel

WCC - AutoSys Web Server Validation Failed - E190098 PKIX path building failed

book

Article ID: 190789

calendar_today

Updated On:

Products

CA Workload Automation AE - Scheduler (AutoSys) Autosys Workload Automation

Issue/Introduction

After updating the AutoSys Web Server to use a CA-signed certificate, the AutoSys server will no longer validate in WCC. The following error is displayed when attempting the validation:


Error: E190098 ACE (web services validation) - A connection exception was encountered: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

Environment

Workload Automation AutoSys

Cause

After changing the AutoSys Web Server certificate from the default self-signed certificate to a CA-signed certificate, the new certificate must be imported into the WCC/WebUI keystore.

Resolution

  • Access the Web Server URL using a browser from your local browser: https://web_server_host.example.com:9443/AEWS/application.wadl
  • Provide valid credentials for the Web Server and to see the WADL xml content
  • Use the browser-specific method for viewing the certificate and then click on the "Details" tab (Usually its clicking on the padlock next to the URL on the left side of the URL)
  • Click on the "Copy to File" button to save the certificate to a file to the local machine (use the Base64  format)
  • Upload the above saved file to a temporary directory on your WCC server
  • Login to the WCC server and stop the WCC services
  • Change Directory to <WCC_INSTALL_DIRECTORY>/data/config and make a backup of the .keystore file
  • Go to <WCC_INSTALL_DIRECTORY>/jre/bin and run the following command...
    ./keytool -import -trustcacerts -file <certificate_file> -keystore  WCC_INSTALL_LOCATION/data/config/.keystore

    Note: <certificate_file> will be the path and file name of the copied certificate file from above.
  • Restart WCC services.