Remote certificate is invalid according to the validation procedure; Export, Data Importer and Event services will not stay started.

Products

• CA IT Asset Manager
• ASSET PORTFOLIO MGMT- SERVER
• CA Service Management - Asset Portfolio Management

Issue/Introduction

We are running the CA Asset Portfolio Management product in SSL.  A new certificate was installed in IIS and it exists in the trusted root certificate store. 

The export, data importer and event services will not stay started and throw the error: 
System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure. 

Environment

CA Asset Portfolio Management 12.x, 14.x or 17.x

Cause

The certificate was installed properly, but had a different name than the original name.  The https binding in IIS did not contain the correct SSL certificate name. 

 

Resolution

Open Internet Information Systems manager and perform these steps (on both the APM web and APM application servers): 

1.  Select the APMWebSite

2.  Select Bindings

3.  Edit the https binding

4.  Select the correct SSL certificate name by choosing 'Select...' 

5.  Click OK

6.  Restart the APMWebSite

7.  Start the export, data importer and event services and verify that they stay started.  Review logs for errors.