TSSR-SA: Failing to communicate to component with error: PKIX path building failed - INCLUDES VIDEO

Version 2
    Share This:

    This document contains official content from the BMC Software Knowledge Base. It is automatically updated when the knowledge article is modified.


    PRODUCT:

    TrueSight Smart Reporting - Server Automation


    COMPONENT:

    TrueSight Smart Reporting for Server Automation



    QUESTION:

    After implement CA signed certificate in TSSA-DW, component in TSSR page is failing to connect.

    In tsrplatform.log, this error is captured

    ERROR (TSRComponentManagementService:getCsrfToken) - Failure while communicating with component for first time. javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target


    ANSWER:

    The error is caused because after change certificate on TSSA-DW the trust relationship between applications is broken, to correct it, you need to import signed certificate and root chain used in TSSA-DW  into TSSR keystore

    That file is located under <TSSR Install path>/appserver/conf/tsr.keystore

    To import it you can follow below steps:

    1. Stop TSSR service using shutdown script
    2. Depending the format in which you received the certificates use one of the following commands
        If it was a p7b file: keytool -import -alias tssa -trustcacerts -file [certificate.p7b] -keystore tsr.keystore
        If it was using pem format: keytool -import -alias tssa -file  <certificate.pem> -keystore tsr.keystore
    3. Start TSSR service using startup script

    Included video demonstration for better understanding




     

    Additional Information: 

      

    Refer Importing TrueSight Server Automation - Data Warehouse custom certificates in TrueSight Smart Reporting documentation page for more information about the topic. 

      

       

      

    Have you seen TrueSight Server Automation How-To videos series? Refer them here
     
    Click to subscribe "TrueSight Automation", our dedicated YouTube channel for How-to videos of products - TrueSight Server Automation (TSSA), Decision Support Server Automation and TrueSight Network Automation (TSNA). 

      

    If you have any issue or question you can contact BMC Customer Support for further assistance. 





      

     


    Article Number:

    000171549


    Article Type:

    FAQ/Procedural



      Looking for additional information?    Search BMC Support  or  Browse Knowledge Articles