dynaTrace 3.x+

  • UEM
  • Server




When using a URL Monitor, the following error is reported during execution of the monitor.


Last polling execution failed PKIX path building failed:
unable to find valid certification path to requested target


This only happens when using HTTPS. If you switch to using HTTP, the problem does not occur.

When the URL is tested from a local browser, it works without an error.




This error can happen when the URL you are monitoring does not have a valid certificate from an authorized CA. This is a common situation with internal or test websites which use self signed certificates.

This error does not happen with your local browser, likely because someone has already created an exception for that website and added the self signed certificate to the browser keystore.

To resolve this issue, simply export the certificate from the browser keystore and import it into the dynaTrace JRE certificate keystore. The general steps for this are outlined below.

  1. Export the certificate from the working browser. Save it to a local file. In IE, this can be found at Tools-> Internet Options-> Content-> Certificates
  2. Import this certificate into dynaTrace's JRE using the following steps:


    cd DT_HOME/jre/bin
    keytool -import-alias <website URI> -file <file saved previously>
    keytool -list (to verify cert was imported)


    The keystore password is changeit.

  3. Restart the collector where the URL Monitor is to be run.
  4. Reexecute the URL Monitor.


  • No labels