https://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-logen-USTelligent Community 12https://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-logThu, 16 Apr 2020 14:34:29 GMTd3a83456-d57b-489c-a84c-4e8267bb592a:e1b3c8ff-e88c-42f4-ad52-f666d0ea4a63Rebecca Jonashttps://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log#commentsCurrent Revision posted to Appian Knowledge Base by Rebecca Jonas on 4/16/2020 2:34:29 PM<br /> <h2><span>Symptoms</span></h2> <p><span>Following an upgrade or hotfix, users are no longer able to login.&nbsp;The following error&nbsp;is seen in the application server log:</span></p> <pre><span>sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</span></pre> <h2><span>Cause</span></h2> <p><span>For Appian 18.3 and later, certificates must be uploaded via the Appian Administration Console. Prior to Appian 18.3, certificates could be deployed directly into the JDK trust store, as described in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a>. In later versions of Appian, every upgrade or hotfix overwrites the JDK trust store. If certificates have not been uploaded into the Appian Administration Console, then they have not been stored in the Appian Primary Database. This means the stored certificates are no longer available after&nbsp;upgrade or hotfix.</span></p> <h2><span>Action</span></h2> <p><span>Follow the steps listed in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a> to upload the <strong>.pem</strong> formatted certificate file into the Appian Administration Console.</span></p> <h2><span>Affected Versions</span></h2> <p><span>This article applies to Appian 18.3 and later.</span></p> <p><span>Last Reviewed: February 2020</span></p><div style="clear:both;"></div> <div style="font-size: 90%;">Tags: known issues, administration, admin console, authentication, upgrade, infrastructure, open issues, Certificates, hotfix</div> https://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log/revision/8Mon, 03 Feb 2020 05:19:58 GMTd3a83456-d57b-489c-a84c-4e8267bb592a:e1b3c8ff-e88c-42f4-ad52-f666d0ea4a63Parmida Borhanihttps://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log#commentsRevision 8 posted to Appian Knowledge Base by Parmida Borhani on 2/3/2020 5:19:58 AM<br /> <h2><span>Symptoms</span></h2> <p><span>Following an upgrade or hotfix, users are no longer able to login.&nbsp;The following error&nbsp;is seen in the application server log:</span></p> <pre><span>sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</span></pre> <h2><span>Cause</span></h2> <p><span>For Appian 18.3 and later, certificates must be uploaded via the Appian Administration Console. Prior to Appian 18.3, certificates could be deployed directly into the JDK trust store, as described in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a>. In later versions of Appian, every upgrade or hotfix overwrites the JDK trust store. If certificates have not been uploaded into the Appian Administration Console, then they have not been stored in the Appian Primary Database. This means the stored certificates are no longer available after&nbsp;upgrade or hotfix.</span></p> <h2><span>Action</span></h2> <p><span>Follow the steps listed in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a> to upload the <strong>.pem</strong> formatted certificate file into the Appian Administration Console.</span></p> <h2><span>Affected Versions</span></h2> <p><span>This article applies to Appian 18.3 and later.</span></p> <p><span>Last Reviewed: February 2020</span></p><div style="clear:both;"></div> <div style="font-size: 90%;">Tags: known issues, administration, admin console, authentication, upgrade, infrastructure, open issues, Certificates, hotfix</div> https://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log/revision/7Mon, 03 Feb 2020 05:19:45 GMTd3a83456-d57b-489c-a84c-4e8267bb592a:e1b3c8ff-e88c-42f4-ad52-f666d0ea4a63Parmida Borhanihttps://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log#commentsRevision 7 posted to Appian Knowledge Base by Parmida Borhani on 2/3/2020 5:19:45 AM<br /> <h2><span>Symptoms</span></h2> <p><span>Following an upgrade or hotfix, users are no longer able to login.&nbsp;The following error&nbsp;is seen in the application server log:</span></p> <pre><span>sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</span></pre> <h2><span>Cause</span></h2> <p><span>For Appian 18.3 and later, certificates must be uploaded via the Appian Administration Console. Prior to Appian 18.3, certificates could be deployed directly into the JDK trust store, as described in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a>. In later versions of Appian, every upgrade or hotfix overwrites the JDK trust store. If certificates have not been uploaded into the Appian Administration Console, then they have not been stored in the Appian Primary Database. This means the stored certificates are no longer available after&nbsp;upgrade or hotfix.</span></p> <h2><span>Action</span></h2> <p><span>Follow the steps listed in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a> to upload the <strong>.pem</strong> formatted certificate file into the Appian Administration Console.</span></p> <h2><span>Affected Versions</span></h2> <p><span>This article applies to Appian 18.3 and later.</span></p> <p><span>Last Reviewed: January 2020</span></p><div style="clear:both;"></div> <div style="font-size: 90%;">Tags: known issues, administration, admin console, authentication, upgrade, infrastructure, open issues, Certificates, hotfix</div> https://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log/revision/6Sun, 02 Feb 2020 22:33:16 GMTd3a83456-d57b-489c-a84c-4e8267bb592a:e1b3c8ff-e88c-42f4-ad52-f666d0ea4a63James Leehttps://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log#commentsRevision 6 posted to Appian Knowledge Base by James Lee on 2/2/2020 10:33:16 PM<br /> <h2><span>Symptoms</span></h2> <p><span>Following an upgrade or hotfix, users are no longer able to login.&nbsp;The following error&nbsp;is seen in the application server log:</span></p> <pre><span>sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</span></pre> <h2><span>Cause</span></h2> <p><span>For Appian 18.3 and later, certificates must be uploaded via the Appian Administration Console. Prior to Appian 18.3, certificates could be deployed directly into the JDK trust store, as described in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a>. In later versions of Appian, every upgrade or hotfix overwrites the JDK trust store. If certificates have not been uploaded into the Appian Administration Console, then they have not been stored in the Appian Primary Database. This means the stored certificates are no longer available after&nbsp;upgrade or hotfix.</span></p> <h2><span>Action</span></h2> <p><span>Follow the steps listed in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a> to upload the <strong>.pem</strong> formatted certificate file into the Appian Administration Console.</span></p> <h2><span>Affected Versions</span></h2> <p><span>This article applies to Appian 18.3 and later.</span></p> <p><span>Last Reviewed: January 2020</span></p><div style="clear:both;"></div> <div style="font-size: 90%;">Tags: known issues, administration, admin console, authentication, upgrade, infrastructure, open issues, Certificates, hotfix</div> https://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log/revision/5Fri, 31 Jan 2020 14:55:59 GMTd3a83456-d57b-489c-a84c-4e8267bb592a:e1b3c8ff-e88c-42f4-ad52-f666d0ea4a63James Leehttps://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log#commentsRevision 5 posted to Appian Knowledge Base by James Lee on 1/31/2020 2:55:59 PM<br /> <h2><span>Symptoms</span></h2> <p><span>Following an upgrade or hotfix, users are no longer able to login.&nbsp;The following error&nbsp;is seen in the application server log:</span></p> <pre><span>sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</span></pre> <h2><span>Cause</span></h2> <p><span>For Appian 18.3 and later, certificates must be uploaded via the Appian Administration Console. Prior to Appian 18.3, certificates could be deployed directly into the JDK trust store, as described in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a>. In later versions of Appian, every upgrade or hotfix overwrites the JDK trust store. If certificates have not been uploaded into the Appian Administration Console, then they have not been stored in the Appian Primary Database. This means the stored certificates are no longer available after&nbsp;upgrade or hotfix. The lack of certificates in the JDK trust store causes the site inaccessibility, and PKIX errors in the application server log.&nbsp;This issue has been reported to the Appian Product Team. The reference number for this issue is&nbsp;<strong>AN-XXXXXX</strong>.</span></p> <h2><span>Action</span></h2> <p><span>Follow the steps listed in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a> to upload the <strong>.pem</strong> formatted certificate file into the Appian Administration Console.</span></p> <h2><span>Affected Versions</span></h2> <p><span>This article applies to Appian 18.3 and later.</span></p> <p><span>Last Reviewed: January 2020</span></p><div style="clear:both;"></div> <div style="font-size: 90%;">Tags: known issues, administration, admin console, upgrade, infrastructure, open issues, Certificates, hotfix</div> https://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log/revision/4Thu, 30 Jan 2020 00:36:38 GMTd3a83456-d57b-489c-a84c-4e8267bb592a:e1b3c8ff-e88c-42f4-ad52-f666d0ea4a63James Leehttps://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log#commentsRevision 4 posted to Appian Knowledge Base by James Lee on 1/30/2020 12:36:38 AM<br /> <h2><span>Symptoms</span></h2> <p><span>Following an upgrade or hotfix, users are no longer able to login.&nbsp;The following error will be seen in the application server log:</span></p> <pre><span>sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</span></pre> <h2><span>Cause</span></h2> <p><span>For Appian 18.3 and later, certificates must be uploaded via the Appian Administration Console. Prior to Appian 18.3, certificates could be deployed directly into the JDK trust store, as described in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a>. In later versions of Appian, every upgrade or hotfix overwrites the JDK trust store. If certificates have not been uploaded into the Appian Administration Console, then they have not been stored in the Appian Primary Database. This means the stored certificates are no longer available after&nbsp;upgrade or hotfix. The lack of certificates in the JDK trust store causes the site inaccessibility, and PKIX errors in the application server log.&nbsp;This issue has been reported to the Appian Product Team. The reference number for this issue is&nbsp;<strong>AN-XXXXXX</strong>.</span></p> <h2><span>Action</span></h2> <p><span>Follow the steps listed in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a> to upload the <strong>.pem</strong> formatted certificate file into the Appian Administration Console.</span></p> <h2><span>Affected Versions</span></h2> <p><span>This article applies to Appian 18.3 and later.</span></p> <p><span>Last Reviewed: January 2020</span></p><div style="clear:both;"></div> <div style="font-size: 90%;">Tags: known issues, administration, admin console, upgrade, infrastructure, open issues, Certificates, hotfix</div> https://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log/revision/3Thu, 30 Jan 2020 00:35:16 GMTd3a83456-d57b-489c-a84c-4e8267bb592a:e1b3c8ff-e88c-42f4-ad52-f666d0ea4a63James Leehttps://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log#commentsRevision 3 posted to Appian Knowledge Base by James Lee on 1/30/2020 12:35:16 AM<br /> <h2><span>Symptoms</span></h2> <p><span>Following an upgrade or hotfix, users are no longer able to login.&nbsp;The following error will be seen in the application server log:</span></p> <pre><span>sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</span></pre> <h2><span>Cause</span></h2> <p><span>For Appian 18.3 and later, certificates must be uploaded via the Appian Administration Console. Prior to Appian 18.3, certificates could be deployed directly into the JDK trust store, as described in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a>. In later versions of Appian, every upgrade or hotfix overwrites the JDK trust store. If certificates have not been uploaded into the Appian Administration Console, then they have not been stored in the Appian Primary Database. Thus the stored certificates are overwritten upon upgrade or hotfix. The lack of certificates in the JDK trust store causes the site inaccessibility, and PKIX errors in the application server log.&nbsp;This issue has been reported to the Appian Product Team. The reference number for this issue is&nbsp;<strong>AN-XXXXXX</strong>.</span></p> <h2><span>Action</span></h2> <p><span>Follow the steps listed in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a> to upload the <strong>.pem</strong> formatted certificate file into the Appian Administration Console.</span></p> <h2><span>Affected Versions</span></h2> <p><span>This article applies to Appian 18.3 and later.</span></p> <p><span>Last Reviewed: January 2020</span></p><div style="clear:both;"></div> <div style="font-size: 90%;">Tags: known issues, administration, admin console, upgrade, infrastructure, open issues, Certificates, hotfix</div> https://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log/revision/2Thu, 30 Jan 2020 00:34:22 GMTd3a83456-d57b-489c-a84c-4e8267bb592a:e1b3c8ff-e88c-42f4-ad52-f666d0ea4a63James Leehttps://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log#commentsRevision 2 posted to Appian Knowledge Base by James Lee on 1/30/2020 12:34:22 AM<br /> <h2><span>Symptoms</span></h2> <p><span>Following an upgrade or hotfix, users are no longer able to login.&nbsp;The following error will be seen in the application server log:</span></p> <pre><span>sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</span></pre> <h2><span>Cause</span></h2> <p><span>For Appian 18.3 and later, certificates to be added to the JDK trust store must be uploaded via the Appian Administration Console. Prior to Appian 18.3, certificates could be deployed directly into the JDK trust store, as described in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a>. In later versions of Appian, every upgrade or hotfix overwrites the JDK trust store. If certificates have not been uploaded into the Appian Administration Console, then they have not been stored in the Appian Primary Database. Thus the stored certificates are overwritten upon upgrade or hotfix. The lack of certificates in the JDK trust store causes the site inaccessibility, and PKIX errors in the application server log.&nbsp;This issue has been reported to the Appian Product Team. The reference number for this issue is&nbsp;<strong>AN-XXXXXX</strong>.</span></p> <h2><span>Action</span></h2> <p><span>Follow the steps listed in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a> to upload the <strong>.pem</strong> formatted certificate file into the Appian Administration Console.</span></p> <h2><span></span></h2> <h2><span>Affected Versions</span></h2> <p><span>This article applies to Appian 18.3 and later.</span></p> <p><span>Last Reviewed: January 2020</span></p><div style="clear:both;"></div> <div style="font-size: 90%;">Tags: known issues, administration, admin console, upgrade, infrastructure, open issues, Certificates, hotfix</div> https://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log/revision/1Thu, 30 Jan 2020 00:33:46 GMTd3a83456-d57b-489c-a84c-4e8267bb592a:e1b3c8ff-e88c-42f4-ad52-f666d0ea4a63James Leehttps://community.appian.com/support/w/kb/1661/kb-2072-login-fails-after-hotfix-or-upgrade-with-unable-to-find-valid-certification-path-to-requested-target-printed-in-the-application-server-log#commentsRevision 1 posted to Appian Knowledge Base by James Lee on 1/30/2020 12:33:46 AM<br /> <h2><span>Symptoms</span></h2> <p><span>Following an upgrade or hotfix, users are no longer able to login to the environment.&nbsp;The following error will be seen in the application server log:</span></p> <pre><span>sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</span></pre> <h2><span>Cause</span></h2> <p><span>For Appian 18.3 and later, certificates to be added to the JDK trust store must be uploaded via the Appian Administration Console. Prior to Appian 18.3, certificates could be deployed directly into the JDK trust store, as described in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a>. In later versions of Appian, every upgrade or hotfix overwrites the JDK trust store. If certificates have not been uploaded into the Appian Administration Console, then they have not been stored in the Appian Primary Database. Thus the stored certificates are overwritten upon upgrade or hotfix. The lack of certificates in the JDK trust store causes the site inaccessibility, and PKIX errors in the application server log.&nbsp;This issue has been reported to the Appian Product Team. The reference number for this issue is&nbsp;<strong>AN-XXXXXX</strong>.</span></p> <h2><span>Action</span></h2> <p><span>Follow the steps listed in <a href="/support/w/kb/403/kb-1187-pkix-path-building-failed-error-when-attempting-to-make-a-call-to-an-external-server-error-thrown-when-making-web-service-calls-over-https-or-ldaps">KB-1187</a> to upload the <strong>.pem</strong> formatted certificate file into the Appian Administration Console.</span></p> <h2><span></span></h2> <h2><span>Affected Versions</span></h2> <p><span>This article applies to Appian 18.3 and later.</span></p> <p><span>Last Reviewed: January 2020</span></p><div style="clear:both;"></div> <div style="font-size: 90%;">Tags: known issues, administration, admin console, upgrade, infrastructure, open issues, Certificates, hotfix</div>