apm_bridge probe not connecting to DX OI on prem

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)
• CA Unified Infrastructure Management On-Premise (Nimsoft / UIM)
• CA Unified Infrastructure Management SaaS (Nimsoft / UIM)

Issue/Introduction

The apm_bridge probe errors on startup after completing the configuration as described in the probe documentation.

The apm_bridge.log shows the following error:

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Environment

• Release: 20.4 or higher
• Component: apm_bridge probe version 1.04hf2 or higher
• DX Platform (OI) version 21.3.1 or higher

Resolution

To resolve this issue, you must import the Root and Issuing certificates (if applicable), for the certificate which is used to sign the OI instance into the keystore in UIM. JRE.

Steps:

1. Obtain the .cer or .crt files which represent the Root and Issuing certificates and place them into the folder: <Nimsoft_home>\Nimsoft\jre\
   e.g. C:\Program Files (x86)\Nimsoft\jre\jre8u282b08\lib\security\
   
   
2. Execute the following command to import the certificate (example given for Root certificate)
   

   C:\Program Files (x86)\Nimsoft\jre\jre8u282b08\bin\keytool  -import  -trustcacerts -alias myRoot -file filename.cer -keystore cacerts

NOTE: on Linux the folder is /opt/nimsoft/jre/(version)/lib/security and you would run:

/opt/nimsoft/jre8u282b08/bin/keytool -import -trustcacerts -alias myRoot -file filename.cer -keystore cacerts

This will allow the probe to connect.

Additional Information

https://docs.oracle.com/cd/E19906-01/820-4916/geygn/index.html