secured mail fetching (Office365 PKIX error)

secured mail fetching (Office365 PKIX error)

1. Download the file from the below attachment and extract  the gencert.bat file to the ManageEngine\\SupportCenter directory.

After extraction you should see the below files under 

gencert.bat under ManageEngine\\SupportCenter
Cert.jar should be under ManageEngine\\SupportCenter\\lib directory.

2.Connect to the commandprompt and goto ManageEngine\\SupportCenter and run the batch file with following format:

C:>ManageEngine\\SupportCenter>gencert.bat exchangeservername:portnumber

3. Running the command You would receive an exception PKIX,and then it would ask to enter a value and then provide value 1 which will generate a file called jssecacerts under ManageEngine\\SupportCenter

4. Copy the jssecacerts file under ManageEngine\\SupportCenter\\jre\\lib\\security folder and then restart the SupportCenter plus application.

5. Make sure the Mail Server Settings is configured correctly,start the fetching and check if it works fine.


FOR LINUX

1. Download the attachment and extract lincertgeneration.zip in ../ManageEngine/SupportCenter directory.


After extraction you should find the below files.,
    gencert.sh under  ../ManageEngine/SupportCenter
    Cert.jar should be under  ../ManageEngine/SupportCenter/lib directory.

2.Connect to the console and goto  ../ManageEngine/SSupportCenter and execute the command line with the below syntax.

 ../ManageEngine/SupportCenter]#sh gencert.sh exchangeservername:portnumber

Example:../ManageEngine/SupportCenter]#sh gencert.sh pop.gmail.com 995

3. When you run the command You would receive an exception PKIX,and then it would ask to enter a value, enter '1', it will generate a file named 'jssecacerts' under ../ManageEngine/SupportCenter.

4. Move the 'jssecacerts' to the location  ../ManageEngine/SupportCenter/jre/lib/security folder and then restart the SupportCenter Plus.

5. Now, save the Incoming mail server settings and start fetching.

In Linux, if you receive the below error, perform the following steps:


1. Remove the gencert.sh and cert.jar files that were previously placed.

2. From the lincertgeneration.zip, place the cert.jar file under Manageengine/SupportCenter folder.

3. Extract all the contents of cert.jar and make sure that all the extracted files InstallCert.Class, InstallCert.java and InstallCert$SavingTrustManager.class are present under the same  Manageengine/SupportCenter folder

4. In the terminal run the below command from Manageengine/SupportCenter directory:

java InstallCert <host_name>:<port> 

5. Now move the generated jssecacerts file to jre/lib/security and restart the server

                  New to ADSelfService Plus?

                    • Related Articles

                    • Mail fetching failed - PKIX path building failed.

                      Cause: If the SSL Certificate in mail server is a self signed certificate then it is not imported in the ServiceDeskPlus-MSP java environment while using the POPS/IMAPS protocol. Error Trace in logs: javax.net.ssl.SSLHandshakeException: ...
                    • Fix JAR for Parse Error Exception Raised during Mail Fetching

                      Issue : Some mail are fetched and created as ticket without description due to message corruption temporarily. The issue is can be identified with the below trace. Fix : The issue is not recreated when the mail is skipped to next schedule and fetched ...
                    • Mail fetching - deleted flag issue

                      This message will be thrown, when you have provided a shared mailbox. The concept here is, SDP MSP reads the mail from the configured mailbox and adds it as a request. During the time, if some other application fetches the mail from the same mailbox ...
                    • List of mail fetching issues and solutions

                      Scenario 1 : Mail fetching issue due to Invalid or No PKIX certificate .   Log traces for Mail Fetching  issues Exception when connecting to store.|javax.mail.MessagingException: sun.security.validator.ValidatorException: PKIX path building failed: ...
                    • Troubleshooting Oauth configuration for mail server settings

                      Oauth in ServiceDesk Plus / AssetExplorer for Mail SDP supports Oauth configuration for Office365 and GSuite mailboxes since 11106 build. Office365 mailboxes can be configured with Oauth authentication using EWS (since 11106) and IMAP / SMTP (since ...