Unable to start windows agent . Certificate verify failed (SSL routines, tls_process_server_certificate) error in Agent log.

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

Unable to start Windows agent. Certificate verification failed (SSL routines, tls_process_server_certificate) error in Agent log. 

20230607/111752.684 - U02000071 Current directory: c:\###\###\Automic_21.0.5\Agents\windows\bin
20230607/111752.684 - U02000360 Agent '[AGENT_NAME]' has been started with process ID '8164'.
20230607/111752.700 - U02000066 Host information: Host name='[Server name]', IP address='[IP address 1]'
20230607/111752.700 - U02000066 Host information: Host name='[Server name]', IP address='[IP address 2]'
20230607/111752.700 - U02000066 Host information: Host name='[Server name]', IP address='::1'
20230607/111752.700 - U02000350 Agent supports IP version: 'IPv4'
20230607/111752.700 - U02000350 Agent supports IP version: 'IPv6'
20230607/111752.700 - U02000331 OpenSSL library Version 'OpenSSL 1.1.1q  5 Jul 2022' is used.
20230607/111752.700 -           C:\###\###\Automic_21.0.5\Agents\windows\bin\libcrypto-1_1-x64.dll
20230607/111752.700 -           C:\###\###\Automic_21.0.5\Agents\windows\bin\libssl-1_1-x64.dll
20230607/111752.731 - U02000134 Thread 'TCP-Thread' started.
20230607/111752.731 - U00003486 ListenSocket with port number '[127.0.0.1]:2300' successfully created.
20230607/111752.731 - U00003486 ListenSocket with port number '[0.0.0.0]:2300' successfully created.
20230607/111752.731 - U02000379 Initiating connection to server '[JCP server name]:[port]' using WebSocket URI: 'wss://[JCP IP adress]:[port]/agent'.
20230607/111752.731 - U02000072 Connection to system 'AWATEST' initiated.
20230607/111752.763 - U02001073 Certificate verification for Issuer '/C=###/O=###/OU=###/CN=[Server name]', Subject '/C=###/O=###/OU=###/CN=[Server name]' failed.
20230607/111752.763 - U02000327 Unexpected error on connection '*SERVER' (socket handle = '1'), reason '"category: 'asio.ssl', (337047686) certificate verify failed (SSL routines, tls_process_server_certificate)"'.
20230607/111752.763 - U02000343 Server connection has been closed.
20230607/111753.778 - U02000302 Agent shutdown has been initiated with return code '68'.
20230607/111753.778 -           Waiting for File Transfer threads ...
20230607/111753.778 - U02000041 Shutdown Agent '[AGENT NAME]'.

Sometimes, but not always this error appears as well:

20230607/111753.778 - U02000328 Unexpected error on listen port occurred, reason 'The I/O operation has been aborted because of either a thread exit or an application request', position 'agent-windows/src/tcpip/Listener.cpp#tcp::Listener::doAcceptWSConnection:52'.
20230607/111753.778 - U02000135 Thread 'TCP-Thread' ended.

This appears always:

20230607/111753.778 - U02000002 Agent '[AGENT_NAME]' version '21.0.5+build.1675168838167' ended abnormally.

Environment

Release : 21.0.5

Resolution

Check if certificate is present in Local Computer\Trusted Root Certification Authorities\Certificates. 

Import the JCPs's .p12 certificate into the host machine certificate store and try again.