topic Re: Failed to assign monitoring configuration to ActiveGate. Reason: Cannot extract extension from checking signature failed in Extensions

Failed to assign monitoring configuration to ActiveGate. Reason: Cannot extract extension from checking signature failed

nareshkumarg — Wed, 08 Apr 2026 06:45:57 GMT

I developed an extension and uploaded it using Visual studio dynatrace extension I was able to upload and activate the extension but when I tried to configure the extension it gives the following error.

Failed to assign monitoring configuration to ActiveGate. Reason: Cannot extract extension from C:\ProgramData\dynatrace\remotepluginmodule\/agent/runtime\extensions\download\custom_dyanext: checking signature failed.

I have placed the CA.pem under the Active gate C:\ProgramData\dynatrace\remotepluginmodule\agent\conf\certificates

the certificate name is ca.pem. I could not find root.pem not sure where to get that.

Re: Failed to assign monitoring configuration to ActiveGate. Reason: Cannot extract extension from checking signature failed

nareshkumarg — Sun, 05 Apr 2026 01:17:11 GMT

I can upload and activate the extension from VScode but when I enable a configuration it fails with checking signature failed. I have placed the certificate under active gate, uploaded the developer and ca certificate under credential vault and restarted the activeGate. Still unable to fix the issue. No sure what the issue.

Re: Failed to assign monitoring configuration to ActiveGate. Reason: Cannot extract extension from checking signature failed

t_pawlak — Sun, 05 Apr 2026 08:43:53 GMT

This error means ActiveGate does not trust the extension signature, due to a certificate chain mismatch.

Key points:

The extension is signed with developer.pem, but validation is done using the root CA (root.pem)
The same root.pem must be uploaded to Credential Vault (Extension validation) and placed on ActiveGate.

Extension signed with one CA, ActiveGate trusts another --> signature validation fails

Just re-sign the extension with the correct CA and ensure the same root.pem is used everywhere.

Re: Failed to assign monitoring configuration to ActiveGate. Reason: Cannot extract extension from checking signature failed

nareshkumarg — Sun, 05 Apr 2026 15:03:03 GMT

@t_pawlak Thanks for your input. As recommended I recreated the certificate and VSCode automatically uploaded the certificate to the dynatrace instance. I located the certificate based on time when I initiated create new certificate.

For windows please check the following location if you are using VSCode for extension development.
C:\Users\<user>\AppData\Roaming\Code\User\workspaceStorage\<dynamic ID>\DynatracePlatformExtensions.dynatrace-extensions\certificates
Copy the ca.pem from this location to all active gates you have used to execute the extension. Finally restart the dynatrace extension service to resolve the issue.