CDA: Bond is not available

Products

• CA Continuous Delivery Automation - Automation Engine

Issue/Introduction

When trying to open the CDA menu in AWI a configuration menu is displayed.

After adding the HTTPS URL of the IIS server in step 1, the error 'Bond is not available' pops up.

The AWI log shows the following error related to TLS certificate:

2025-11-20 15:34:26,978 qtp311921453-51        [ERROR] AUTOMIC:0/UC/UC node0qmz2cii3xddm10wdq1ojoc3yv6-0 0000000001073008  [com.uc4.ecc.plugins.bond.extensions.system.SystemSetupPresenter] - Bond is not available. Send REST request failed
com.uc4.ecc.plugins.bond.exception.BondPluginException: Send REST request failed
 at com.uc4.ecc.plugins.bond.rest.RestClient.execute(RestClient.java:78)
<...>
  at java.base/java.lang.Thread.run(Thread.java:840)
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
<...>
 ... 120 common frames omitted
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
<...>
 ... 144 common frames omitted
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148)
 at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129)
 at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
 at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)
 ... 149 common frames omitted

Cause

The error message 'Bond is not available' potentially has many causes.

One of these is that the keystore of the Java version AWI is using doesn't have the TLS certificate of the IIS server or the intermediate or root certificates are missing.

Resolution

The TLS certificate of the IIS server need to be imported in the keystore of the Java installation that AWI is using, for instance:

C:\Program Files\jdk-11.0.17+8\lib\security\cacerts

IMPORTANT: Importing the certificate chain into the Java keystore does not automatically import the intermediate and root certificates, these may have to be exported and imported separately!