Could not establish trust relationship for the SSL/TLS secure channel with authority '10.0.0.19'.

[mike_meirovitz]

Hi,

I am trying to use HTTP in my SmartConnector processor. When the processor is running I am getting this error:

2022-02-28 17:27:00.1884,Error,Processor,<no principal>,Could not establish trust relationship for the SSL/TLS secure channel with authority '10.0.0.19'.
The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
The remote certificate is invalid according to the validation procedure.

The server address in the SmartConnector processor is: https://10.0.0.19:443/EcoStruxure/DataExchange

Any idea why and how to fix?

Thanks.

Mike

[ardak]

Hi Mike,

I'm assuming you mean HTTPS here:

This means more or less what is says in the error message. Smartconnector doesn't do it's own certificate validation, so your operating system has deemed that the certificate in use(I'm guessing by EBO in this case) is not valid.

Setting up certificates correctly is a big topic and can depend on the situation.

If you're just trying to use a local EBO generated certificate, a good start is making sure that the certificate is properly installed on the system and that the host IP and the cert IP match up. A good indicator for this is that Workstation let's you "Always trust this certificate" on login.

BR

Armend

[mike_meirovitz]

Hi Armend,

Thank you for your answer. Yes, I meant HTTPS...

The certificate was created in the EBO. I assume it is properly installed and trusted. I am able to login into the EBO using this certificate.

I have trusted the certificate only once and I don't see the "Trust Certificate" button any more when I open the Workstation.

I am using EBO 4.0 on Windows 11.

I have the attached document that I used to create the certificate. Do you have more updated one?

I appreciate your help.

Mike

[ardak]

The created certificate should be fine. If using a self-signed certificate, you need to make sure it's properly installed on any client system.

When prompted, install it in Trusted Root Certification Authorities. Make sure it is in the certificate store in the right place.

Make sure that the cert IP match with any connection strings used. That is, don't use localhost if it's on the same computer.

BR

Armend

[mike_meirovitz]

Hi Armend,

Thank you for your answer. Can you please explain what do you mean by "Make sure it is in the certificate store in the right place."?

Thanks.

Mike

[ardak]

Press "Win + R"

Type "certlm.msc" and Run

Look in "Trusted Root Certification Authorities" under certificates

As is it self signed, the EBO certificate has to be installed there for your that computer to trust it. 

BR

Armend

[mike_meirovitz · Accepted solution]

Hi Armend,

Thank you for your answer! The SmartConnector processor is working fine now with HTTPS URL.

Mike