KB Article #179235

Cannot display Sentinel login page: No trusted certificate found

Problem

When trying to access the Sentinel UI, the page doesn't display anything and by looking at the error, you have:

java.rmi.ConnectIOException: error during JRMP connection establishment; nested exception is:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found

at sun.rmi.transport.tcp.TCPChannel.createConnection(Unknown Source)

at sun.rmi.transport.tcp.TCPChannel.newConnection(Unknown Source)

at sun.rmi.server.UnicastRef.invoke(Unknown Source)

at java.rmi.server.RemoteObjectInvocationHandler.invokeRemoteMethod(Unknown Source)

at java.rmi.server.RemoteObjectInvocationHandler.invoke(Unknown Source)

at com.sun.proxy.$Proxy3.isPassPortAmActivated(Unknown Source)

at com.axway.trkserver.gui230.common.login.LoginPanel.jbInit(LoginPanel.java:376)

at com.axway.trkserver.gui230.common.login.LoginPanel.<init>(LoginPanel.java:142)

at com.axway.trkserver.gui230.common.SentinelApplet.init(SentinelApplet.java:271)

at com.axway.trkserver.gui230.common.SentinelServerInterfaces.init(SentinelServerInterfaces.java:257)

at com.axway.trkserver.gui230.common.SentinelFrontalInterfaces.init(SentinelFrontalInterfaces.java:42)

at com.axway.trkserver.gui230.AdministrationInterface.init(AdministrationInterface.java:69)

at com.sun.deploy.uitoolkit.impl.awt.AWTAppletAdapter.init(Unknown Source)

at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)



Resolution

It means the root certificate in the chain is not trusted by the windows server.

-when you are in the browser, click on the lock to display the certificate.

-go to the Certification path tab and double click on the root (top of the chain – and top of the screen)

-when you opened it, go to details tab and click on the “copy to file” button

-chosse DER encoded binary X509 (.cer) and put it in your desktop or download directory.

-Double click on the file you just saved to open the root certificate

-click on the install certificate button

-select the option Place all certificates in the following store

-choose Trusted Root Certification Authorities

-click OK and accept this cert.

-restart your browser, you will be able to login.