SRM-RIB Service shows "Connection Lost" in DX NetOps Portal although srm-rib service is running

Products

• Network Observability
• CA Performance Management
• Spectrum

Issue/Introduction

The Report Manager Service (srm-rib) appears as Disconnected or shows Connection Lost in the DX NetOps Portal (Performance Center) Data Source settings. However, checking the service status on the Linux host shows the service is active and running.

The SRMRibService.log file shows the following exception:

qtp1297149880-19         | 2026-06-02 18:11:03,315 | com.broadcom.netops.srm.auth.SpectrumRemoteAuthenticator         

      | Error while making an http request for authorization

javax.net.ssl.SSLHandshakeException: (certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at jdk.internal.net.http.HttpClientImpl.send(HttpClientImpl.java:905) ~[java.net.http:?]

at jdk.internal.net.http.HttpClientFacade.send(HttpClientFacade.java:133) ~[java.net.http:?]

Environment

DX NetOps Performance Management: All Versions.

Cause

The issue is typically caused by a failure in the SSL/TLS handshake or authorization chain.

Certificate Trust: If Spectrum OneClick is configured for HTTPS, the SRM-RIB service (which acts as a client to OneClick) must trust the OneClick SSL certificate.

Resolution

If your Spectrum OneClick server uses SSL, the SRM-RIB service must have the certificate in its truststore.

1. Export the certificate from the OneClick server's keystore (default alias: tomcatssl).
2. Import the certificate into the Java truststore used by the SRM-RIB service on the SRM host.
3. Restart the service:
   bash

   systemctl restart srm-rib