Dynatrace License Check Error

[willie_liu]

After install Dynatrace Managed （Install Server Success）
it shows License Check Error
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException
Something wrong?
We install with no Proxy

[Julius_Loman · Accepted solution]

Is there maybe a transparent proxy between mission control and the Dynatrace server?

What is your output of the following command from the Dynatrace server:

echo |openssl s_client -showcerts -connect mcsvc.dynatrace.com:443

Does it show the following?

Server certificate
subject=C = US, ST = Massachusetts, L = Waltham, O = Dynatrace LLC, OU = GTG, CN = mcsvc.dynatrace.com

issuer=C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA

[willie_liu]

Yep it show,

but there is an error like :

verify error:num=19:self signed certificate in certificate chain

[skrystosik · Accepted solution]

Now you are using proxy or you have traffic open wide to Mission Control? We have the same issue as you but with proxy. In our case, self signed certificate was overwrite by proxy to client one. We had to add client certificate (root + cer) to trusted according to this article:

https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-managed/configuration/how-t...

Check in your infrastructure if there is something that can overwrite your certificate and do steps according to link above.

Sebastian

[willie_liu]

It Stop at step 2, cause we cant create the cert as the step

[skrystosik]

Trust store is optional, you can skip.

Sebastian

[willie_liu]

Hi Sebastian

if skip how do i get the cert?

Willie

[skrystosik]

You need ask your security for certificate

[Radoslaw_Szulgo]

That's a symptom of a communication issue to Mission Control. There has to be a transparent proxy in your network - probably firewall - as Julius writes.

Installer checks Mission Control connectivity and downloads license meta information to orchestrate self-monitoring OneAgent.

The error message comes from the JVM - so I assume it's the indirect output of the Server process.

I advise to open a support ticket so our team can make sure your installation works reliably and will help you with proper configuration.

[willie_liu]

i open a support ticket

ill wait Thanks