<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://community.appian.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/"><channel><title>KB-2275 SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate</link><description /><dc:language>en-US</dc:language><generator>Telligent Community 12</generator><item><title>KB-2275 SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate</link><pubDate>Wed, 29 Nov 2023 19:40:20 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:9b945f0c-2d85-4b9b-96d8-b4d587924805</guid><dc:creator>pauline.delacruz</dc:creator><comments>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate#comments</comments><description>Current Revision posted to Appian Knowledge Base by pauline.delacruz on 11/29/2023 7:40:20 PM&lt;br /&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Symptoms&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Using the Appian RPA feature &amp;quot;allow Appian to sign-in&amp;quot;,&amp;nbsp;&lt;/span&gt;&lt;span style="font-weight:400;"&gt;the service cannot connect with the console and the following error is present inside the&amp;nbsp;&lt;strong&gt;appianAutoLogin.log&lt;/strong&gt;:&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;b&gt;|ERROR|LoginAgent.AutoLoginService|System.AggregateException:&lt;/b&gt; &lt;b&gt;One&lt;/b&gt; &lt;b&gt;or&lt;/b&gt; &lt;b&gt;more&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;occurred.&lt;/b&gt; &lt;b&gt;(The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.)&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Net.Http.HttpRequestException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Security.Authentication.AuthenticationException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;remote&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;is&lt;/b&gt; &lt;b&gt;invalid&lt;/b&gt; &lt;b&gt;because&lt;/b&gt; &lt;b&gt;of&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;in&lt;/b&gt; &lt;b&gt;the&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;chain:&lt;/b&gt; &lt;b&gt;UntrustedRoot&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Cause&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The certificate necessary to complete the handshake with your site is not trusted by the&amp;nbsp;Windows Certificate Store for one of the following reasons:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;The certificate is self-signed or signed by a private authority. This can happen by injecting the certificate via an external component such as an antivirus, firewall, proxy, etc.&lt;span style="font-weight:400;"&gt;&lt;br /&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li&gt;&lt;span&gt;The certificate is signed by a Public Certificate Authority, but the server is not presenting the full certificate chain with all intermediate certs up to the CA root cert.&lt;/span&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Action&lt;/span&gt;&lt;/h2&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Uninstall the Appian RPA in that machine using the uninstaller in the agent folder.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Download a new agent &lt;strong&gt;without&lt;/strong&gt; the auto sign-in feature enabled and install it.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Follow the instructions in &lt;a href="/support/w/kb/3176/kb-2272-pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore"&gt;KB-2272&lt;/a&gt;&lt;span&gt;&amp;nbsp;&lt;/span&gt;&lt;/span&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;to identify the missing certificates and please follow the documentation from&amp;nbsp;&lt;a href="https://learn.microsoft.com/en-us/windows-hardware/drivers/install/certificate-stores"&gt;Microsoft&lt;/a&gt;&amp;nbsp;to add them.&lt;/span&gt;&lt;/span&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;&lt;strong&gt;Note:&lt;/strong&gt;&amp;nbsp;Appian RPA auto sign-in feature is a .NET service.&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;&lt;strong&gt;Note:&lt;/strong&gt; The same certificates added into your JVM truststore should be the missing ones in your local certificate store.&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Please open a case with Appian Support if you have any questions with any of these steps.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Workaround&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If the missing certificates are injected by any specific application in the host machine, such as an antivirus or firewall, they can be configured in order to prevent this injection.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Affected Versions&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This article applies to all versions of Appian Cloud.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Last Reviewed: November 2023&lt;/span&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: Appian RPA, infrastructure, Certificate&lt;/div&gt;
</description></item><item><title>[DRAFT SP-8347] KB-XXXX SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate/revision/11</link><pubDate>Thu, 09 Nov 2023 17:51:02 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:9b945f0c-2d85-4b9b-96d8-b4d587924805</guid><dc:creator>pauline.delacruz</dc:creator><comments>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate#comments</comments><description>Revision 11 posted to Appian Knowledge Base by pauline.delacruz on 11/9/2023 5:51:02 PM&lt;br /&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Symptoms&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Using the Appian RPA feature &amp;quot;allow Appian to sign-in&amp;quot;,&amp;nbsp;&lt;/span&gt;&lt;span style="font-weight:400;"&gt;the service cannot connect with the console and the following error is present inside the&amp;nbsp;&lt;strong&gt;appianAutoLogin.log&lt;/strong&gt;:&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;b&gt;|ERROR|LoginAgent.AutoLoginService|System.AggregateException:&lt;/b&gt; &lt;b&gt;One&lt;/b&gt; &lt;b&gt;or&lt;/b&gt; &lt;b&gt;more&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;occurred.&lt;/b&gt; &lt;b&gt;(The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.)&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Net.Http.HttpRequestException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Security.Authentication.AuthenticationException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;remote&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;is&lt;/b&gt; &lt;b&gt;invalid&lt;/b&gt; &lt;b&gt;because&lt;/b&gt; &lt;b&gt;of&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;in&lt;/b&gt; &lt;b&gt;the&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;chain:&lt;/b&gt; &lt;b&gt;UntrustedRoot&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Cause&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The certificate necessary to complete the handshake with your site is not trusted by the&amp;nbsp;Windows Certificate Store for one of the following reasons:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is self-signed or signed by a private authority, which can be injected by an external component such as an antivirus, firewall, proxy, etc.&lt;br /&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is signed by a Public Certificate Authority, but the server is not presenting the full certificate chain with all intermediate certs up to the CA root cert.&lt;/span&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Action&lt;/span&gt;&lt;/h2&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Uninstall the Appian RPA in that machine using the uninstaller in the agent folder.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Download a new agent &lt;strong&gt;without&lt;/strong&gt; the auto sign-in feature enabled and install it.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Follow the instructions in &lt;a href="/support/w/kb/3176/kb-2272-pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore"&gt;KB-2272&lt;/a&gt;&lt;span&gt;&amp;nbsp;&lt;/span&gt;&lt;/span&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;to identify the missing certificates and please follow the documentation from&amp;nbsp;&lt;a href="https://learn.microsoft.com/en-us/windows-hardware/drivers/install/certificate-stores"&gt;Microsoft&lt;/a&gt;&amp;nbsp;to add them.&lt;/span&gt;&lt;/span&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;&lt;strong&gt;Note:&lt;/strong&gt;&amp;nbsp;Appian RPA auto sign-in feature is a .NET service.&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;&lt;strong&gt;Note:&lt;/strong&gt; The same certificates added into your JVM truststore should be the missing ones in your local certificate store.&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Please open a case with Appian Support if you have any questions with any of these steps.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Workaround&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If the missing certificates are injected by any specific application in the host machine, such as an antivirus or firewall, they can be configured in order to prevent this injection.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Affected Versions&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This article applies to all versions of Appian Cloud.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Last Reviewed: November 2023&lt;/span&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: Appian RPA, infrastructure, Certificate&lt;/div&gt;
</description></item><item><title>[DRAFT SP-8347] KB-XXXX SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate/revision/10</link><pubDate>Tue, 26 Sep 2023 16:24:33 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:9b945f0c-2d85-4b9b-96d8-b4d587924805</guid><dc:creator>pauline.delacruz</dc:creator><comments>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate#comments</comments><description>Revision 10 posted to Appian Knowledge Base by pauline.delacruz on 9/26/2023 4:24:33 PM&lt;br /&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Symptoms&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Using the Appian RPA feature &amp;quot;allow Appian to sign-in&amp;quot;,&amp;nbsp;&lt;/span&gt;&lt;span style="font-weight:400;"&gt;the service cannot connect with the console and the following error is present inside the&amp;nbsp;&lt;strong&gt;appianAutoLogin.log&lt;/strong&gt;:&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;b&gt;|ERROR|LoginAgent.AutoLoginService|System.AggregateException:&lt;/b&gt; &lt;b&gt;One&lt;/b&gt; &lt;b&gt;or&lt;/b&gt; &lt;b&gt;more&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;occurred.&lt;/b&gt; &lt;b&gt;(The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.)&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Net.Http.HttpRequestException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Security.Authentication.AuthenticationException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;remote&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;is&lt;/b&gt; &lt;b&gt;invalid&lt;/b&gt; &lt;b&gt;because&lt;/b&gt; &lt;b&gt;of&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;in&lt;/b&gt; &lt;b&gt;the&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;chain:&lt;/b&gt; &lt;b&gt;UntrustedRoot&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Cause&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The certificate necessary to complete the handshake with your site is not trusted by the&amp;nbsp;Windows Certificate Store for one of the following reasons:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is self-signed or signed by a private authority, which can be injected by an external component such as an antivirus, firewall, proxy, etc.&lt;br /&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is signed by a Public Certificate Authority, but the server is not presenting the full certificate chain with all intermediate certs up to the CA root cert.&lt;/span&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Action&lt;/span&gt;&lt;/h2&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Uninstall the Appian RPA in that machine using the uninstaller in the agent folder.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Download a new agent &lt;strong&gt;without&lt;/strong&gt; the auto sign-in feature enabled and install it.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Follow the instructions in &lt;span&gt;&lt;a href="/solution-engineering/w/kb_draft/3176/pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore"&gt;https://community.appian.com/solution-engineering/w/kb_draft/3176/pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore&lt;/a&gt;&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;Use the steps in the&amp;nbsp;above KB to identify the missing certificates and please follow the documentation from&amp;nbsp;&lt;a href="https://learn.microsoft.com/en-us/windows-hardware/drivers/install/certificate-stores"&gt;Microsoft&lt;/a&gt;&amp;nbsp;to add them.&lt;/span&gt;&lt;/span&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;&lt;strong&gt;Note:&lt;/strong&gt;&amp;nbsp;Appian RPA auto sign-in feature is a .NET service.&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;&lt;strong&gt;Note:&lt;/strong&gt; The same certificates added into your JVM truststore should be the missing ones in your local certificate store.&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Please open a case with Appian Support if you have any questions with any of these steps.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Workaround&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If the missing certificates are injected by any specific application in the host machine, such as an antivirus or firewall, they can be configured in order to prevent this injection.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Affected Versions&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This article applies to all versions of Appian Cloud.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Last Reviewed:&amp;nbsp;September 2023&lt;/span&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: Appian RPA, infrastructure, Certificate&lt;/div&gt;
</description></item><item><title>[DRAFT SP-8347] KB-XXXX SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate/revision/9</link><pubDate>Thu, 31 Aug 2023 14:48:14 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:9b945f0c-2d85-4b9b-96d8-b4d587924805</guid><dc:creator>pauline.delacruz</dc:creator><comments>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate#comments</comments><description>Revision 9 posted to Appian Knowledge Base by pauline.delacruz on 8/31/2023 2:48:14 PM&lt;br /&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Symptoms&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Using the Appian RPA feature &amp;quot;allow Appian to sign-in&amp;quot;,&amp;nbsp;&lt;/span&gt;&lt;span style="font-weight:400;"&gt;the service cannot connect with the console and the following error is present inside the&amp;nbsp;&lt;strong&gt;appianAutoLogin.log&lt;/strong&gt;:&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;b&gt;|ERROR|LoginAgent.AutoLoginService|System.AggregateException:&lt;/b&gt; &lt;b&gt;One&lt;/b&gt; &lt;b&gt;or&lt;/b&gt; &lt;b&gt;more&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;occurred.&lt;/b&gt; &lt;b&gt;(The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.)&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Net.Http.HttpRequestException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Security.Authentication.AuthenticationException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;remote&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;is&lt;/b&gt; &lt;b&gt;invalid&lt;/b&gt; &lt;b&gt;because&lt;/b&gt; &lt;b&gt;of&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;in&lt;/b&gt; &lt;b&gt;the&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;chain:&lt;/b&gt; &lt;b&gt;UntrustedRoot&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Cause&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The certificate necessary to complete the handshake with your site is not trusted by the&amp;nbsp;Windows Certificate Store for one of the following reasons:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is self-signed or signed by a private authority, which can be injected by an external component such as an antivirus, firewall, proxy, etc.&lt;br /&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is signed by a Public Certificate Authority, but the server is not presenting the full certificate chain with all intermediate certs up to the CA root cert.&lt;/span&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Action&lt;/span&gt;&lt;/h2&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Uninstall the Appian RPA in that machine using the uninstaller in the agent folder.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Download a new agent &lt;strong&gt;without&lt;/strong&gt; the auto sign-in feature enabled and install it.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Follow the instructions in &lt;span&gt;&lt;a href="/solution-engineering/w/kb_draft/3176/pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore"&gt;https://community.appian.com/solution-engineering/w/kb_draft/3176/pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore&lt;/a&gt;&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;Use the steps in the previous KB to identify the missing certificates and please follow the documentation from&amp;nbsp;&lt;a href="https://learn.microsoft.com/en-us/windows-hardware/drivers/install/certificate-stores"&gt;Microsoft&lt;/a&gt;&amp;nbsp;to add them.&lt;/span&gt;&lt;/span&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;&lt;strong&gt;Note:&lt;/strong&gt;&amp;nbsp;Appian RPA auto sign-in feature is a .NET service.&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;&lt;strong&gt;Note:&lt;/strong&gt; The same certificates added into your JVM truststore should be the missing ones in your local certificate store.&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Please open a case with Appian Support if you have any questions with any of these steps.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Workaround&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If the missing certificates are injected by any specific application in the host machine, such as an antivirus or firewall, they can be configured in order to prevent this injection.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Affected Versions&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This article applies to all versions of Appian Cloud.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Last Reviewed: August 2023&lt;/span&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: Appian RPA, infrastructure, Certificate&lt;/div&gt;
</description></item><item><title>[DRAFT SP-8347] KB-XXXX SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate/revision/8</link><pubDate>Tue, 29 Aug 2023 17:50:42 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:9b945f0c-2d85-4b9b-96d8-b4d587924805</guid><dc:creator>pauline.delacruz</dc:creator><comments>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate#comments</comments><description>Revision 8 posted to Appian Knowledge Base by pauline.delacruz on 8/29/2023 5:50:42 PM&lt;br /&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Symptoms&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Using the Appian RPA feature &amp;quot;allow Appian to sign-in&amp;quot;,&amp;nbsp;&lt;/span&gt;&lt;span style="font-weight:400;"&gt;the service cannot connect with the console and the following error is present inside the&amp;nbsp;&lt;strong&gt;appianAutoLogin.log&lt;/strong&gt;:&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;b&gt;|ERROR|LoginAgent.AutoLoginService|System.AggregateException:&lt;/b&gt; &lt;b&gt;One&lt;/b&gt; &lt;b&gt;or&lt;/b&gt; &lt;b&gt;more&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;occurred.&lt;/b&gt; &lt;b&gt;(The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.)&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Net.Http.HttpRequestException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Security.Authentication.AuthenticationException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;remote&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;is&lt;/b&gt; &lt;b&gt;invalid&lt;/b&gt; &lt;b&gt;because&lt;/b&gt; &lt;b&gt;of&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;in&lt;/b&gt; &lt;b&gt;the&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;chain:&lt;/b&gt; &lt;b&gt;UntrustedRoot&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Cause&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The certificate necessary to complete the handshake with your site is not trusted by the JVM in your host machine for one of the following reasons:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is self-signed or signed by a private authority, which can be injected by an external component such as an antivirus, firewall, proxy, etc.&lt;br /&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is signed by a Public Certificate Authority, but the server is not presenting the full certificate chain with all intermediate certs up to the CA root cert.&lt;/span&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Action&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Appian RPA auto sign-in feature is a .NET service. In order to add the missing certificates, please check the following documentation from Microsoft &lt;a href="https://learn.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-view-certificates-with-the-mmc-snap-in"&gt;here&lt;/a&gt;.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;If you want to identify any missing certificates in your local certificate store for this connection, try checking the certificates missing in your JVM during the Appian RPA agent connection process. Typically, they tend to be the same.&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Uninstall the Appian RPA in that machine using the uninstaller in the agent folder.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Download a new agent without the auto sign-in feature enabled and install it.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Follow the instructions in &lt;span&gt;https://community.appian.com/solution-engineering/w/kb_draft/3176/pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The same certificates added into your JVM truststore, as described in the linked KB, should be the missing ones in your local certificate store.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Please open a case with Appian Support if you have any questions with any of these steps.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Workaround&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If the missing certificates are injected by any specific application in the host machine, such as an antivirus or firewall, they can be configured or disabled in order to prevent this injection.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Affected Versions&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This article applies to all versions of Appian Cloud.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Last Reviewed:&amp;nbsp;July 2023&lt;/span&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: Appian RPA, infrastructure, Certificate&lt;/div&gt;
</description></item><item><title>[DRAFT SP-8347] KB-XXXX SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate/revision/7</link><pubDate>Fri, 14 Jul 2023 19:21:38 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:9b945f0c-2d85-4b9b-96d8-b4d587924805</guid><dc:creator>pauline.delacruz</dc:creator><comments>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate#comments</comments><description>Revision 7 posted to Appian Knowledge Base by pauline.delacruz on 7/14/2023 7:21:38 PM&lt;br /&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Symptoms&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Using the Appian RPA feature &amp;quot;allow Appian to sign-in&amp;quot;,&amp;nbsp;&lt;/span&gt;&lt;span style="font-weight:400;"&gt;the service cannot connect with the console and the following error is present inside the&amp;nbsp;&lt;strong&gt;appianAutoLogin.log&lt;/strong&gt;:&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;b&gt;|ERROR|LoginAgent.AutoLoginService|System.AggregateException:&lt;/b&gt; &lt;b&gt;One&lt;/b&gt; &lt;b&gt;or&lt;/b&gt; &lt;b&gt;more&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;occurred.&lt;/b&gt; &lt;b&gt;(The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.)&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Net.Http.HttpRequestException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Security.Authentication.AuthenticationException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;remote&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;is&lt;/b&gt; &lt;b&gt;invalid&lt;/b&gt; &lt;b&gt;because&lt;/b&gt; &lt;b&gt;of&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;in&lt;/b&gt; &lt;b&gt;the&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;chain:&lt;/b&gt; &lt;b&gt;UntrustedRoot&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Cause&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The certificate necessary to complete the handshake with your site is not trusted by the JVM in your host machine for one of the following reasons:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is self-signed or signed by a private authority, which can be injected by an external component such as an antivirus, firewall, proxy, etc.&lt;br /&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is signed by a Public Certificate Authority, but the server is not presenting the full certificate chain with all intermediate certs up to the CA root cert.&lt;/span&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Action&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Appian RPA auto sign-in feature is a .NET service. In order to add the missing certificates, please check the following documentation from Microsoft &lt;a href="https://learn.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-view-certificates-with-the-mmc-snap-in"&gt;here&lt;/a&gt;.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;If you want to identify any missing certificates in your local certificate store for this connection, try checking the certificates missing in your JVM during the Appian RPA agent connection process. Typically, they tend to be the same.&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Uninstall the Appian RPA in that machine using the uninstaller in the agent folder.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Download a new agent without the auto sign-in feature enabled and install it.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Follow the instructions in &lt;span&gt;https://community.appian.com/solution-engineering/w/kb_draft/3176/pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The same certificates added into your JVM truststore, as described in the linked KB, should be the missing ones in your local certificate store.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Please open a case with Appian Support if you have any questions with any of these steps.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Workaround&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If the missing certificates are injected by any specific application in the host machine, such as an antivirus or firewall, they can be configured or disabled in order to prevent this injection.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Affected Versions&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This article applies to all versions of Appian Cloud.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Last Reviewed:&amp;nbsp;July 2023&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: Appian RPA, infrastructure, Certificate&lt;/div&gt;
</description></item><item><title>[DRAFT SP-8347] KB-XXXX SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate/revision/6</link><pubDate>Thu, 06 Jul 2023 17:00:32 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:9b945f0c-2d85-4b9b-96d8-b4d587924805</guid><dc:creator>pauline.delacruz</dc:creator><comments>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate#comments</comments><description>Revision 6 posted to Appian Knowledge Base by pauline.delacruz on 7/6/2023 5:00:32 PM&lt;br /&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Symptoms&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Using the Appian RPA feature &amp;quot;allow Appian to sign-in&amp;quot;,&amp;nbsp;&lt;/span&gt;&lt;span style="font-weight:400;"&gt;the service cannot connect with the console and the following error is present inside the&amp;nbsp;&lt;strong&gt;appianAutoLogin.log&lt;/strong&gt;:&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;b&gt;|ERROR|LoginAgent.AutoLoginService|System.AggregateException:&lt;/b&gt; &lt;b&gt;One&lt;/b&gt; &lt;b&gt;or&lt;/b&gt; &lt;b&gt;more&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;occurred.&lt;/b&gt; &lt;b&gt;(The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.)&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Net.Http.HttpRequestException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Security.Authentication.AuthenticationException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;remote&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;is&lt;/b&gt; &lt;b&gt;invalid&lt;/b&gt; &lt;b&gt;because&lt;/b&gt; &lt;b&gt;of&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;in&lt;/b&gt; &lt;b&gt;the&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;chain:&lt;/b&gt; &lt;b&gt;UntrustedRoot&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Cause&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The certificate necessary to complete the handshake with your site is not trusted by the JVM in your host machine for one of the following reasons:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is self-signed or signed by a private authority. The certificate can be injected by an external component like antivirus, firewall, proxy, etc.&lt;br /&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is signed by a Public Certificate Authority, but the server is not presenting the full certificate chain with all intermediate certs up to the CA root cert.&lt;/span&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Action&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Appian RPA auto sign-in feature is a .NET service. In order to add the missing certificates, please check the following documentation from Microsoft &lt;a href="https://learn.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-view-certificates-with-the-mmc-snap-in"&gt;here&lt;/a&gt;.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;If you want to identify any missing certificates in your local certificate store for this connection, try checking the certificates missing in your JVM during the Appian RPA agent connection process. Typically, they tend to be the same.&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Uninstall the Appian RPA in that machine using the uninstaller in the agent folder.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Download a new agent without the auto sign-in feature enabled and install it.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Follow the instructions in &lt;span&gt;https://community.appian.com/solution-engineering/w/kb_draft/3176/pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The same certificates added into your JVM truststore, as described in the linked KB, should be the missing ones in your local certificate store.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Please open a case with Appian Support if you have any questions with any of these steps.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Workaround&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If the missing certificates are injected by any specific application in the host machine, such as an antivirus or firewall, they can be configured or disabled in order to prevent this injection.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Affected Versions&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This article applies to all versions of Appian Cloud.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Last Reviewed:&amp;nbsp;July 2023&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: Appian RPA, infrastructure, Certificate&lt;/div&gt;
</description></item><item><title>[DRAFT SP-8347] KB-XXXX SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate/revision/5</link><pubDate>Mon, 03 Jul 2023 17:39:19 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:9b945f0c-2d85-4b9b-96d8-b4d587924805</guid><dc:creator>pauline.delacruz</dc:creator><comments>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate#comments</comments><description>Revision 5 posted to Appian Knowledge Base by pauline.delacruz on 7/3/2023 5:39:19 PM&lt;br /&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Symptoms&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Using the Appian RPA feature &amp;quot;allow Appian to sign-in&amp;quot;,&amp;nbsp;&lt;/span&gt;&lt;span style="font-weight:400;"&gt;the service cannot connect with the console and the following error is present inside the&amp;nbsp;&lt;strong&gt;appianAutoLogin.log&lt;/strong&gt;:&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;b&gt;|ERROR|LoginAgent.AutoLoginService|System.AggregateException:&lt;/b&gt; &lt;b&gt;One&lt;/b&gt; &lt;b&gt;or&lt;/b&gt; &lt;b&gt;more&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;occurred.&lt;/b&gt; &lt;b&gt;(The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.)&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Net.Http.HttpRequestException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Security.Authentication.AuthenticationException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;remote&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;is&lt;/b&gt; &lt;b&gt;invalid&lt;/b&gt; &lt;b&gt;because&lt;/b&gt; &lt;b&gt;of&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;in&lt;/b&gt; &lt;b&gt;the&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;chain:&lt;/b&gt; &lt;b&gt;UntrustedRoot&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Cause&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The certificate necessary to complete the handshake with your site is not trusted by the JVM in your host machine for one of the following reasons:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is self-signed or signed by a private authority. The certificate can be injected by an external component like antivirus, firewall, proxy, etc.&lt;br /&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is signed by a Public Certificate Authority, but the server is not presenting the full certificate chain with all intermediate certs up to the CA root cert.&lt;/span&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Action&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Appian RPA auto sign-in feature is a .NET service. In order to add the missing certificates, please check the following documentation from Microsoft &lt;a href="https://learn.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-view-certificates-with-the-mmc-snap-in"&gt;here&lt;/a&gt;.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;If you want to identify any missing certificates in your local certificate store for this connection, try checking the certificates missing in your JVM during the Appian RPA agent connection process. Typically, they tend to be the same.&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Uninstall the Appian RPA in that machine using the uninstaller in the agent folder.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Download a new agent without the auto sign-in feature enabled and install it.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Follow the instructions in &lt;span&gt;https://community.appian.com/solution-engineering/w/kb_draft/3176/pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The same certificates added into your JVM truststore, as described in the linked KB, should be the missing ones in your local certificate store.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Please open a case with Appian Support if you have any questions with any of these steps.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Workaround&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If the missing certificates are injected by any specific application in the host machine, such as an antivirus or firewall, they can be configured or disabled in order to prevent this injection.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Affected Versions&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This article applies to all versions of Appian Cloud.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Last Reviewed:&amp;nbsp;June 2023&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: Appian RPA, infrastructure, Certificate&lt;/div&gt;
</description></item><item><title>[DRAFT SP-8347] KB-XXXX SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate/revision/4</link><pubDate>Fri, 30 Jun 2023 16:28:23 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:9b945f0c-2d85-4b9b-96d8-b4d587924805</guid><dc:creator>pauline.delacruz</dc:creator><comments>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate#comments</comments><description>Revision 4 posted to Appian Knowledge Base by pauline.delacruz on 6/30/2023 4:28:23 PM&lt;br /&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Symptoms&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Using the Appian RPA feature &amp;quot;allow Appian to sign-in&amp;quot;,&amp;nbsp;&lt;/span&gt;&lt;span style="font-weight:400;"&gt;the service cannot connect with the console and the following error is present inside the&amp;nbsp;&lt;strong&gt;appianAutoLogin.log&lt;/strong&gt;:&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;b&gt;|ERROR|LoginAgent.AutoLoginService|System.AggregateException:&lt;/b&gt; &lt;b&gt;One&lt;/b&gt; &lt;b&gt;or&lt;/b&gt; &lt;b&gt;more&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;occurred.&lt;/b&gt; &lt;b&gt;(The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.)&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Net.Http.HttpRequestException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Security.Authentication.AuthenticationException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;remote&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;is&lt;/b&gt; &lt;b&gt;invalid&lt;/b&gt; &lt;b&gt;because&lt;/b&gt; &lt;b&gt;of&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;in&lt;/b&gt; &lt;b&gt;the&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;chain:&lt;/b&gt; &lt;b&gt;UntrustedRoot&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Cause&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This is because&amp;nbsp;the certificate necessary to complete the handshake with your site is not trusted by the JVM in your host machine for one of the following reasons:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is self-signed or signed by a private authority. The certificate can be injected by an external component like antivirus, firewall, proxy, etc.&lt;br /&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is signed by a Public Certificate Authority, but the server is not presenting the full certificate chain with all intermediate certs up to the CA root cert.&lt;/span&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Action&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Appian RPA auto sign-in feature is a .NET service. In order to add the missing certificates, please check the following documentation from Microsoft &lt;a href="https://learn.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-view-certificates-with-the-mmc-snap-in"&gt;here&lt;/a&gt;.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;If you want to identify any missing certificates in your local certificate store for this connection, try checking the certificates missing in your JVM during the Appian RPA agent connection process. Typically, they tend to be the same.&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Uninstall the Appian RPA in that machine using the uninstaller in the agent folder.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Download a new agent without the auto sign-in feature enabled and install it.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Follow the instructions in &lt;span&gt;https://community.appian.com/solution-engineering/w/kb_draft/3176/pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The same certificates added into your JVM truststore, as described in the linked KB, should be the missing ones in your local certificate store.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Please open a case with Appian Support if you have any questions with any of these steps.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Workaround&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If the missing certificates are injected by any specific application in the host machine, such as an antivirus or firewall, they can be configured or disabled in order to prevent this injection.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Affected Versions&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This article applies to all versions of Appian Cloud.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Last Reviewed:&amp;nbsp;June 2023&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: Appian RPA, infrastructure, Certificate&lt;/div&gt;
</description></item><item><title>[DRAFT SP-8347] KB-XXXX SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate/revision/3</link><pubDate>Fri, 23 Jun 2023 15:47:39 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:9b945f0c-2d85-4b9b-96d8-b4d587924805</guid><dc:creator>pauline.delacruz</dc:creator><comments>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate#comments</comments><description>Revision 3 posted to Appian Knowledge Base by pauline.delacruz on 6/23/2023 3:47:39 PM&lt;br /&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Symptoms&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Using the Appian RPA feature &amp;quot;allow Appian to sign-in&amp;quot;,&amp;nbsp;&lt;/span&gt;&lt;span style="font-weight:400;"&gt;the service cannot connect with the console and the following error is present inside the&amp;nbsp;&lt;strong&gt;appianAutoLogin.log&lt;/strong&gt;:&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;b&gt;|ERROR|LoginAgent.AutoLoginService|System.AggregateException:&lt;/b&gt; &lt;b&gt;One&lt;/b&gt; &lt;b&gt;or&lt;/b&gt; &lt;b&gt;more&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;occurred.&lt;/b&gt; &lt;b&gt;(The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.)&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Net.Http.HttpRequestException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Security.Authentication.AuthenticationException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;remote&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;is&lt;/b&gt; &lt;b&gt;invalid&lt;/b&gt; &lt;b&gt;because&lt;/b&gt; &lt;b&gt;of&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;in&lt;/b&gt; &lt;b&gt;the&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;chain:&lt;/b&gt; &lt;b&gt;UntrustedRoot&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Cause&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This is because&amp;nbsp;the certificate necessary to complete the handshake with your site is not trusted by the JVM in your host machine for one of the following reasons:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is self-signed or signed by a private authority. The certificate can be injected by an external component like antivirus, firewall, proxy, etc.&lt;br /&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is signed by a Public Certificate Authority, but the server is not presenting the full certificate chain with all intermediate certs up to the CA root cert.&lt;/span&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Action&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Appian RPA auto sign-in feature is a .NET service. In order to add the missing certificates, please check the following documentation from Microsoft &lt;a href="https://learn.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-view-certificates-with-the-mmc-snap-in"&gt;here&lt;/a&gt;.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;If you want to identify any missing certificates in your local certificate store for this connection, try checking the certificates missing in your JVM during the Appian RPA agent connection process. Typically, they tend to be the same.&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Uninstall the Appian RPA in that machine using the uninstaller in the agent folder.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Download a new agent without the auto sign-in feature enabled and install it.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Follow the instructions in &lt;span&gt;https://community.appian.com/solution-engineering/w/kb_draft/3176/pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The same certificates added into your JVM truststore as described in the linked KB should be the missing ones in your local certificate store.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Please open a case with Appian Support if you have any questions with any of these steps.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Workaround&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If the missing certificates are injected by any specific application in the host machine, like antivirus or firewall they can be configured or disabled in order to prevent this injection.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Affected Versions&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This article applies to all versions of Appian Cloud.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Last Reviewed:&amp;nbsp;June 2023&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: Appian RPA, infrastructure, Certificate&lt;/div&gt;
</description></item><item><title>SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate/revision/2</link><pubDate>Fri, 23 Jun 2023 15:45:18 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:9b945f0c-2d85-4b9b-96d8-b4d587924805</guid><dc:creator>pauline.delacruz</dc:creator><comments>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate#comments</comments><description>Revision 2 posted to Appian Knowledge Base by pauline.delacruz on 6/23/2023 3:45:18 PM&lt;br /&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Symptoms&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Using the Appian RPA feature &amp;quot;allow Appian to sign-in&amp;quot; &lt;/span&gt;&lt;span style="font-weight:400;"&gt;the service cannot connect with the console and the following error is present in &lt;strong&gt;appianAutoLogin.log&lt;/strong&gt;:&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;b&gt;|ERROR|LoginAgent.AutoLoginService|System.AggregateException:&lt;/b&gt; &lt;b&gt;One&lt;/b&gt; &lt;b&gt;or&lt;/b&gt; &lt;b&gt;more&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;occurred.&lt;/b&gt; &lt;b&gt;(The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.)&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Net.Http.HttpRequestException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Security.Authentication.AuthenticationException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;remote&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;is&lt;/b&gt; &lt;b&gt;invalid&lt;/b&gt; &lt;b&gt;because&lt;/b&gt; &lt;b&gt;of&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;in&lt;/b&gt; &lt;b&gt;the&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;chain:&lt;/b&gt; &lt;b&gt;UntrustedRoot&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Cause&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This is because&amp;nbsp;the certificate necessary to complete the handshake with your site is not trusted by the JVM in your host machine for one of the following reasons:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is self-signed or signed by a private authority. The certificate can be injected by an external component like antivirus, firewall, proxy, etc.&lt;br /&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is signed by a Public Certificate Authority, but the server is not presenting the full certificate chain with all intermediate certs up to the CA root cert.&lt;/span&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Action&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Appian RPA auto sign-in feature is a .NET service. In order to add the missing certificates, please check the following documentation from Microsoft &lt;a href="https://learn.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-view-certificates-with-the-mmc-snap-in"&gt;here&lt;/a&gt;.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;&lt;span&gt;If you want to identify any missing certificates in your local certificate store for this connection, try checking the certificates missing in your JVM during the Appian RPA agent connection process. Typically, they tend to be the same.&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Uninstall the Appian RPA in that machine using the uninstaller in the agent folder.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Download a new agent without the auto sign-in feature enabled and install it.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Follow the instructions in &lt;span&gt;https://community.appian.com/solution-engineering/w/kb_draft/3176/pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The same certificates added into your JVM truststore as described in the linked KB should be the missing ones in your local certificate store.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Please open a case with Appian Support if you have any questions with any of these steps.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Workaround&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If the missing certificates are injected by any specific application in the host machine, like antivirus or firewall they can be configured or disabled in order to prevent this injection.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Affected Versions&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This article applies to all versions of Appian Cloud.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Last Reviewed:&amp;nbsp;June 2023&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: Appian RPA, infrastructure, Certificate&lt;/div&gt;
</description></item><item><title>SSL connection could not be established for Appian RPA auto login service due to an invalid certificate</title><link>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate/revision/1</link><pubDate>Sat, 03 Jun 2023 11:46:23 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:9b945f0c-2d85-4b9b-96d8-b4d587924805</guid><dc:creator>Juan Rodríguez</dc:creator><comments>https://community.appian.com/support/w/kb/3177/kb-2275-ssl-connection-could-not-be-established-for-appian-rpa-auto-login-service-due-to-an-invalid-certificate#comments</comments><description>Revision 1 posted to Appian Knowledge Base by Juan Rodríguez on 6/3/2023 11:46:23 AM&lt;br /&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Symptoms&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Using the Appian RPA feature &amp;quot;allow Appian to sign-in&amp;quot; &lt;/span&gt;&lt;span style="font-weight:400;"&gt;the service cannot connect with the console and the following error is present in &lt;strong&gt;appianAutoLogin.log&lt;/strong&gt;:&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;b&gt;|ERROR|LoginAgent.AutoLoginService|System.AggregateException:&lt;/b&gt; &lt;b&gt;One&lt;/b&gt; &lt;b&gt;or&lt;/b&gt; &lt;b&gt;more&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;occurred.&lt;/b&gt; &lt;b&gt;(The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.)&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Net.Http.HttpRequestException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;SSL&lt;/b&gt; &lt;b&gt;connection&lt;/b&gt; &lt;b&gt;could&lt;/b&gt; &lt;b&gt;not&lt;/b&gt; &lt;b&gt;be&lt;/b&gt; &lt;b&gt;established,&lt;/b&gt; &lt;b&gt;see&lt;/b&gt; &lt;b&gt;inner&lt;/b&gt; &lt;b&gt;exception.&lt;/b&gt;&lt;br /&gt;&lt;br /&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;b&gt;---&amp;gt;&lt;/b&gt; &lt;b&gt;System.Security.Authentication.AuthenticationException:&lt;/b&gt; &lt;b&gt;The&lt;/b&gt; &lt;b&gt;remote&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;is&lt;/b&gt; &lt;b&gt;invalid&lt;/b&gt; &lt;b&gt;because&lt;/b&gt; &lt;b&gt;of&lt;/b&gt; &lt;b&gt;errors&lt;/b&gt; &lt;b&gt;in&lt;/b&gt; &lt;b&gt;the&lt;/b&gt; &lt;b&gt;certificate&lt;/b&gt; &lt;b&gt;chain:&lt;/b&gt; &lt;b&gt;UntrustedRoot&lt;br /&gt;&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/h2&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Cause&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;This is because&amp;nbsp;the certificate necessary to complete the handshake with your site is not trusted by the JVM in your host machine for one of the following reasons:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is self-signed or signed by a private authority. The certificate can be injected by an external component like antivirus, firewall, proxy, etc.&lt;br /&gt;&lt;br /&gt;&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;The certificate is signed by a Public Certificate Authority, but the server is not presenting the full certificate chain with all intermediate certs up to the CA root cert.&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Action&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Appian RPA auto sign-in feature is a .NET service. In order to add the missing certificates please check the following documentation from Microsoft:&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;a href="https://learn.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-view-certificates-with-the-mmc-snap-in"&gt;&lt;span style="font-weight:400;"&gt;https://learn.microsoft.com/en-us/dotnet/framework/wcf/feature-details/how-to-view-certificates-with-the-mmc-snap-in&lt;/span&gt;&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If you need to identify the certificates missing in your local certificate store for this connection you can try identifying the missing certificates in your JVM when connecting the Appian RPA agent, they usually are the same:&lt;/span&gt;&lt;/p&gt;
&lt;ol&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Uninstall the Appian RPA in that machine using the uninstaller in the agent folder.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Download a new agent without the auto sign-in feature enabled and install it.&lt;/span&gt;&lt;/li&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;Follow the instructions in &lt;span&gt;https://community.appian.com/solution-engineering/w/kb_draft/3176/pkix-path-building-failed-for-appian-rpa-agent-connection-due-to-a-missing-certificate-in-the-java-truststore&lt;/span&gt;&lt;/span&gt;&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;The same certificates added into your JVM truststore as described in the linked KB should be the missing ones in your local certificate store.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Please open a case with Appian Support if you have any questions with any of these steps.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/h2&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Workaround&lt;/span&gt;&lt;/h2&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;If the missing certificates are injected by any specific application in the host machine, like antivirus or firewall they can be configured or disabled in order to prevent this injection.&lt;/span&gt;&lt;/p&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/h2&gt;
&lt;h2&gt;&lt;span style="font-weight:400;"&gt;Affected Versions&lt;/span&gt;&lt;/h2&gt;
&lt;ul&gt;
&lt;li style="font-weight:400;"&gt;&lt;span style="font-weight:400;"&gt;This article applies to all versions of Appian Cloud.&lt;/span&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span style="font-weight:400;"&gt;Last Reviewed:&amp;nbsp;June 2023&lt;/span&gt;&lt;/p&gt;
&lt;pre&gt;&lt;span style="font-weight:400;"&gt;&lt;b&gt;&amp;nbsp;&lt;/b&gt;&lt;/span&gt;&lt;/pre&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: Appian RPA, infrastructure, Certificate&lt;/div&gt;
</description></item></channel></rss>