Analytics - SupportCenter Plus integration PKIX path building failed (for SCP 11.0)
While syncing Analytics Reports, this error may appear where
the self-signed certificate to sync both Analytics Reports and SCP will
be missing. These traces (mentioned below) can be viewed in the file zrmeinteglog0.txt under the location \ManageEngine\SupportCenterPlus\Logs.
Error Trace in logs:
[11:27:09:057]|[07-19-2021]|[com.manageengine.zrmeinteg.framework.ZRSDPFrameWorkImpl]|[SEVERE]|[75]: FAILURE :Could not update the configuration settings as an exception while saving the Advanced Analytics Configuration Details.<br><br> Please report the problem to the system administrator. Support file will have the error trace to analyze the problem and which can be created at Support -> Create Support File.|
[11:27:09:071]|[07-19-2021]|[com.manageengine.zrmeinteg.framework.ZRSDPFrameWorkImpl]|[INFO]|[75]: Exception in getting users info and license info from analyics|
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1946)
1. Stop the application service.
2.
Download the file from the link given below and extract the contents of
"certgeneration_windows" folder to the SupportCenter Plus Home
directory using 7zip so that lib folder is merged:
Windows:
As Attached
Linux:
As Attached
3. Execute the below command:
Windows:
<Drive>:\ManageEngine\SupportCenterPlus> gencert.bat analyticsapi.domain.com:443
ex : gencert.bat analyticsapi.zoho.com:443
(You can mention the hostname of the Analytics Plus server )
Linux:
\ManageEngine\ServicedeskPlus-MSP gencert.sh analyticsapi.zoho.com:443
4. You will receive an exception PKIX. On supplying the value 1, a file called jssecacerts is generated in the <Directory>\ManageEngine\SupportCenterPlus.
5. Copy and place the jssecacerts file under \ManageEngine\SupportCenterPlus\jre\lib\security folder. If you already have an existing jssecacerts file, kindly take a backup of the file by creating a folder called Cacert_Backup under the same directory
6. Start the application and Try the re-sync.