Getting error in APM Bridge when trying to connect DX-OI SAAS Version

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

Can see below error in the apm_bridge probe logs 

javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Dec 17 12:23:56:739 ERROR [ForkJoinPool-1-worker-1, apm_bridge] javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.ssl.Alert.createSSLException(Alert.java:131)
    at sun.security.ssl.TransportContext.fatal(TransportContext.java:331)
    at sun.security.ssl.TransportContext.fatal(TransportContext.java:274)
    at sun.security.ssl.TransportContext.fatal(TransportContext.java:269)

Environment

UIM Version 23.4.x

apm bridge version 1.10

DX-OI SAAS :DX Operational Observability v24.11.1 (24.11.1.2722)

Cause

The apmservicesgateway or DX OI application certificates need to be imported in the cacerts file of JRE associated with Nimsoft Robot machine where apm_bridge probe is running

Resolution

1. For this access the apmservices-gateway URL. Click on the Security Icon and export the ROOT CA Certificate.  

         

     2. The format can be as shown below

         

     3. Save the file and Copy this certificate into any location of apm_bridge deployed Nimsoft robot. Repeat the above steps for all intermediate certificates as well. (you need to upload root + all intermediate certificates from the chain to the castore)

     4. Validate the version of java, and location of java that needs to be updated:

         a. Right click > Edit on the apm_bridge probe:

             

         b. Review the Command to see what java is used for the probe:

                     

         c. Open the controller to see what is the current java directory for the Command:

                  

     5. Now import this certificate into cacerts of JRE associated with Nimsoft Robot machine where apm_bridge probe is running 

       
         C:\ PROGRA~2\Nimsoft\jre21\jre21.0.9_10\lib\security\cacerts 

         To do so log in to apm_gateway  probe machine. Open command prompt in administrator mode.

         CD into C:\ PROGRA~2\Nimsoft\jre21\jre21.0.9_10\bin

         In this bin folder keytool utility will be available. Import the certificate using this keytool utility

             keytool -import –trustcacerts -keystore C:\PROGRA~2\Nimsoft\jre21\jre21.0.9_10\lib\security\cacerts -file "C:\ca\DigiCert Global Root CA.crt" -alias DXOIRootCert

        Note: the JRE folder name might change based on which version of UIM you are, therefore adjust the jre folder name ( \jre21\jre21.0.9_10\ ) accordingly

     6. You will be prompted with password. Give the password as changeit

         Now you will prompted a message to accept certificate. Type yes

         The certificate should get imported successfully

         Now deactivate the apm_bridge probe and activate it again.