KB-2072 Login fails after hotfix or upgrade with "unable to find valid certification path to requested target" printed in the application server log


Following an upgrade or hotfix, users are no longer able to login. The following error is seen in the application server log:

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target


For Appian 18.3 and later, certificates must be uploaded via the Appian Administration Console. Prior to Appian 18.3, certificates could be deployed directly into the JDK trust store, as described in KB-1187. In later versions of Appian, every upgrade or hotfix overwrites the JDK trust store. If certificates have not been uploaded into the Appian Administration Console, then they have not been stored in the Appian Primary Database. This means the stored certificates are no longer available after upgrade or hotfix.


Follow the steps listed in KB-1187 to upload the .pem formatted certificate file into the Appian Administration Console.

Affected Versions

This article applies to Appian 18.3 and later.

Last Reviewed: February 2020