Failed to assign monitoring configuration to ActiveGate. Reason: Cannot extract extension from checking signature failed

[nareshkumarg]

I developed an extension and uploaded it using Visual studio dynatrace extension I was able to upload and activate the extension but when I tried to configure the extension it gives the following error.

Failed to assign monitoring configuration to ActiveGate. Reason: Cannot extract extension from C:\ProgramData\dynatrace\remotepluginmodule\/agent/runtime\extensions\download\custom_dyanext: checking signature failed.

I have placed the CA.pem under the Active gate C:\ProgramData\dynatrace\remotepluginmodule\agent\conf\certificates

the certificate name is ca.pem. I could not find root.pem not sure where to get that. 

[nareshkumarg]

I can upload and activate the extension from VScode but when I enable a configuration it fails with checking signature failed. I have placed the certificate under active gate, uploaded the developer and ca certificate under credential vault and restarted the activeGate. Still unable to fix the issue. No sure what the issue.

[t_pawlak · Accepted solution]

This error means ActiveGate does not trust the extension signature, due to a certificate chain mismatch.

Key points:

The extension is signed with developer.pem, but validation is done using the root CA (root.pem)
The same root.pem must be uploaded to Credential Vault (Extension validation) and placed on ActiveGate.

Extension signed with one CA, ActiveGate trusts another --> signature validation fails

Just  re-sign the extension with the correct CA and ensure the same root.pem is used everywhere.

[nareshkumarg]

@t_pawlak Thanks for your input. As recommended I recreated the certificate and VSCode automatically uploaded the certificate to the dynatrace instance. I located the certificate based on time when I initiated create new certificate.

For windows please check the following location if you are using VSCode for extension development.
C:\Users\<user>\AppData\Roaming\Code\User\workspaceStorage\<dynamic ID>\DynatracePlatformExtensions.dynatrace-extensions\certificates
Copy the ca.pem from this location to all active gates you have used to execute the extension. Finally restart the dynatrace extension service to resolve the issue.