Getting error in APM Bridge when trying to connect DX-OI SAAS Version

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

Can see below error in the apm_bridge probe logs 

javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Dec 17 12:23:56:739 ERROR [ForkJoinPool-1-worker-1, apm_bridge] javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.ssl.Alert.createSSLException(Alert.java:131)
    at sun.security.ssl.TransportContext.fatal(TransportContext.java:331)
    at sun.security.ssl.TransportContext.fatal(TransportContext.java:274)
    at sun.security.ssl.TransportContext.fatal(TransportContext.java:269)

Environment

UIM Version 23.4.x

apm bridge version 1.10

DX-OI SAAS :DX Operational Observability v24.11.1 (24.11.1.2722)

Cause

The apmservicesgateway or DX OI application certificates need to be imported in the cacerts file of JRE associated with Nimsoft Robot machine where apm_bridge probe is running

Resolution

1. For this access the apmservices-gateway URL. Click on the Security Icon and export the ROOT CA Certificate.  

      2. The format can be as shown below

     3. Save the file and Copy this certificate into any location of apm_bridge deployed Nimsoft robot.

 

     4. Now import this certificate into cacerts of JRE associated with Nimsoft Robot machine where apm_bridge probe is running

        C:\ PROGRA~2\Nimsoft\jre\jre8u382b05\lib\security\cacerts 

        To do so logon to apm_gateway  probe machine. Open command prompt in administrator mode.

        CD into C:\ PROGRA~2\Nimsoft\jre\jre8u382b05\bin

        In this bin folder keytool utility will be available. Import the certificate using this keytool utility

 

       keytool -import –trustcacerts -keystore C:\PROGRA~2\Nimsoft\jre\jre8u382b05\lib\security\cacerts -file "C:\ca\DigiCert Global Root CA.crt" -alias DXOIRootCert

       Note: the JRE folder name might change based on which version of UIM you are, therefore adjust the jre folder name ( jre8u382b05 ) accordingly

 

     5. You will be prompted with password. Give the password as changeit

          Now you will prompted a message to accept certificate. Type yes

          The certificate should get imported successfully

          Now deactivate the apm_bridge probe and activate it again.