PKIX Path Building Failed Issue Troubleshooting - Precisely_EnterWorks - EnterWorks - 11.0

Issue

When connecting to a secure email server, FTP server, S3 server, or Azure Blob server, the Enterworks service (EPX/EPIM services) encounters the following exception:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Resolution

If the server uses 'DigiCert Global Root CA' as the root certificate, follow these steps:

1. Stop Enterworks services.
2. Download the "DigiCert Global Root G2" certificate from DigiCert's website by clicking the Download DER/CRT link. Save the DigiCertGlobalRootG2.crt file to your download folder.
3. Open a command window as an admin user, navigate to Enterworks/jdk/bin, and run the following commands (adjust the path if Enterworks is installed on a different drive):

   keytool -trustcacerts -keystore "C:/Enterworks/jdk/jre/lib/security/cacerts" -storepass changeit -importcert -alias DigiCertGlobalRootG2 -file "C:/YourDownloads/DigiCertGlobalRootG2.crt"
   keytool -trustcacerts -keystore "C:/Enterworks/EPX/bin/certs/tomcat.jks" -storepass enterworks -importcert -alias DigiCertGlobalRootG2 -file "C:/YourDownloads/DigiCertGlobalRootG2.crt"

4. Start Enterworks services.