KB Article #179235
Cannot display Sentinel login page: No trusted certificate found
Problem
When trying to access the Sentinel UI, the page doesn't display anything and by looking at the error, you have:
java.rmi.ConnectIOException: error during JRMP connection establishment; nested exception is:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found
at sun.rmi.transport.tcp.TCPChannel.createConnection(Unknown Source)
at sun.rmi.transport.tcp.TCPChannel.newConnection(Unknown Source)
at sun.rmi.server.UnicastRef.invoke(Unknown Source)
at java.rmi.server.RemoteObjectInvocationHandler.invokeRemoteMethod(Unknown Source)
at java.rmi.server.RemoteObjectInvocationHandler.invoke(Unknown Source)
at com.sun.proxy.$Proxy3.isPassPortAmActivated(Unknown Source)
at com.axway.trkserver.gui230.common.login.LoginPanel.jbInit(LoginPanel.java:376)
at com.axway.trkserver.gui230.common.login.LoginPanel.<init>(LoginPanel.java:142)
at com.axway.trkserver.gui230.common.SentinelApplet.init(SentinelApplet.java:271)
at com.axway.trkserver.gui230.common.SentinelServerInterfaces.init(SentinelServerInterfaces.java:257)
at com.axway.trkserver.gui230.common.SentinelFrontalInterfaces.init(SentinelFrontalInterfaces.java:42)
at com.axway.trkserver.gui230.AdministrationInterface.init(AdministrationInterface.java:69)
at com.sun.deploy.uitoolkit.impl.awt.AWTAppletAdapter.init(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Resolution
It means the root certificate in the chain is not trusted by the windows server.
-when you are in the browser, click on the lock to display the certificate.
-go to the Certification path tab and double click on the root (top of the chain – and top of the screen)
-when you opened it, go to details tab and click on the “copy to file” button
-chosse DER encoded binary X509 (.cer) and put it in your desktop or download directory.
-Double click on the file you just saved to open the root certificate
-click on the install certificate button
-select the option Place all certificates in the following store
-choose Trusted Root Certification Authorities
-click OK and accept this cert.
-restart your browser, you will be able to login.