How to connect to an URL that reqires a certificate.

Discussion created by Salome_Prangl-Groetzl_759 on Apr 26, 2017


If you try to create a new adapter for a RA solution (e.g. Webservices, VmWare, ..) that requires a certificate, you get the following error message:

 Error Messge: unable to find valid certification path to requested target








There is no certificate for the website you want to connect to.






Go to the https webpage and copy the certificate in Internet Explorer as shown below


Go to the https webpage


Rightclick on a blank field on the webpage and choose "Properties"


Click on button "Certificates"


Change to tab "Details"


Click on button "Copy to file"


A Window "Welcome to the Certificate Export Wizard" appears


Click on button "Next"


Choose Format "DER encoded binary X.509 (.CER)"


Click on button "Next"


Choose Filename and Dowload location


Click on button "Next"


Click on button "Finish"






The next step is to find out which java version is used .


My agent is started via the Service Manager Dialog and uses the java listed below:


C:\Program Files\Java\jdk1.8.0_16\bin\


Now search for a file named "cacerts" in the java directory that runs this agent.


It's found in the following directory:


C:\Program Files\Java\jdk1.8.0_16\jre\lib\security


Run the following command on the command line to import the certificate:


keytool -importcert -file c:\Companyj.cer -keystore cacerts


You have to create a password (You can use 'changeit' as keystore password (that's some kind of default password)).


Trust this certificate?: yes


Certificate was added to keystore


The import is done and the agent can connect to the URL specified in the RA agent .


If you're interested in a more detailed description:






It's necessary to have all certificates installed for all webservice / VM environments you want to connect to