<h2>"No issuer certificate for certificate in certification path found" error observed on the MID logs</h2><br/><div style="overflow-x:auto"><article><div ><h3 >Issue </h3><section><ul style="list-style-position: inside;"><li>MID servers keep going down instantaneously with the below error on the agent logs.<br /><br />"<span style="color: #ff0000;">StartupSequencer WARNING *** WARNING *** javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: No issuer certificate for certificate in certification path found.</span>"</li></ul></section></div><div ><h3 >Release</h3><section><ul style="list-style-position: inside;"><li>Orlando Patch 7a and above</li></ul></section></div><div ><h3 >Cause</h3><section><ul style="list-style-position: inside;"><li>Certificates Missing</li></ul></section></div><div ><h3 >Resolution</h3><section><ul style="list-style-position: inside;"><li>From the host machine stop the MID server service.<br /><br /></li><li>Navigate to the instance URL on the host and click on the "lock" icon near the URL bar and click on "View Certificates".<br /><br /></li><li>Observe the list of certificates being displayed. They will be as below (The number of certificates may vary from customer to customer)<br /><br /><img src="/sys_attachment.do?sys_id=ee39f42cdb4e685066f1d9d968961918" width="689" height="418" /><br /><br /></li><li>Export all these certificates by following the below procedure<br /> <ul style="list-style-position: inside;"><li>Click on the certificate</li><li>Go to View Certificate</li><li>Go to Details</li><li>Copy to File</li><li>Click on Next</li><li>Select Format "DER encoded Binary X.509 (.CER)"</li><li>Select Next</li><li>Give a name to the file</li><li>Next</li><li>This will show you a pop up as "The export was successful"</li><li>Click Ok and Finish<br /><br /></li></ul> </li><li>Once all the certificates are exported, go to your host machine and open the command prompt to import these exported certificates there.<br /><br /></li><li>Navigate to "agent > jre > bin" on the command prompt<br /><br /></li><li>Execute the command below<br /><br /><span style="font-size: 10pt;"><strong>keytool -import -alias <name of the cert> -file "<path to the downloaded certificate including the certificate name>" -keystore "<path to the agent>\agent\jre\lib\security\cacerts"<br /></strong></span><br /></li><li style="font-size: 8pt;"><span style="font-size: 8pt;">When prompted for keystore password enter "<strong>changeit"</strong><br /><br /></span></li><li style="font-size: 8pt;"><span style="font-size: 8pt;">Run the above command for all the downloaded certificates.<br /><br /></span></li><li style="font-size: 8pt;"><span style="font-size: 8pt;">Start the MID server Service<br /><br /></span></li><li style="font-size: 8pt;"><span style="font-size: 8pt;">Validate the MID server</span></li></ul></section></div></article></div>