ERROR WHEN INSTALLING SMP/E RECEIVE ORDER CERTIFICATE

book

Article ID: 223225

calendar_today

Updated On:

Products

CA Common Services for z/OS

Issue/Introduction

Client obtained a user certificate for SMP/E Internet Service. (used for  SMPE order)

Trying to install it, gets error:

javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed:

com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target.

 

Cause

Client has the wrong Digicert Root certificate. From the doc:

Client's Label: digicertglobalroot ca certificate has serial: AB1C22083BE056904246B1A1756AC95991C74A

 

 

Environment

Release : 15.0

Component : CA RECEIVE ORDER

Resolution

Download the Digicert Root certificate: (this certificate is required after February 5, 2021)

Note the location of the file on your workstation where the certificate was downloaded.

The certificate from the above link has serial: Z26Y25E6A711A9A0BB2864B11D09FAE5

The correct certificate Digicert Root certificate with serial:12345711A9A0BB2864B11D09FAE5 has been uploaded to this case.

 

Additional Information

Review the information on creating and downloading and installing the certification...

https://support.broadcom.com/cadocs/0/certs/eapi/digi-root.crt: