UIM Upgrade fails with "PKIX path building failed" error during Database Configuration

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

When attempting to upgrade DX Unified Infrastructure Management (UIM) to version 23.4 or later, the installer fails during the Upgrade Preparation or Database Configuration step.

The following error message is displayed in the installer UI:

"encrypt" property is set to "false" and "trustServerCertificate" property is set to "false" but the driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption: Error: (certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

Environment

UIM 23.4 and later

Resolution

The UIM upgrade is failing because the Java-based installer cannot establish a secure connection to the SQL Server. This occurs when SQL Server is configured to force encryption, but the installer doesn't recognize the server's certificate, leading to a "PKIX path building failed" error even if Encrypt = false is set in the data_engine.

To resolve this, you have two options:

• Option A: Disable 'Force Encryption' on the SQL Server side (via SQL Server Configuration Manager) to allow the Encrypt = false setting to take effect.

• Option B: If encryption is required by your policy, you will need to import the SQL Server’s certificate into the UIM JRE keystore so the installer can trust the connection. You can find the steps for that here: Import the Certificate on Server.

Then attempt to upgrade again.