NSM Health Check Fail

[WGOKC]

When running the health check on the NSM I am getting the following fail message on the 'Signature Set Update Server Connectivity' check:

Server: menshen1.intruvert.com

Port: TCP 443

I/O Error:  sun.security.validator.ValidatorException

PKIX path building fail:

java.security.cert.CertPathBuilderException

No issuer certificate for certificate in certificate path found.

Any ideas on how to resolve this?

[XxSDxX]

Hi @WGOKC , 

Please follow the steps for the following KB: KB92951

https://kc.mcafee.com/corporate/index?page=content&id=KB92951

This should fix the issue.

Regards,

[WGOKC]

Thank you for your reply.  I copied the downloaded file to the specified location; however, I am still receiving the following message on the healcheck:

Server: menshen1.intruvert.com
Port: TCP 443
I/O Error: sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: No issuer certificate for certificate in certification path found.

[XxSDxX]

Hi @WGOKC 

Make sure you restart the NSM services after you replaced the file mentioned in the KB.

If you already did that, confirm that you have access to the McAfee update/download sites and ports as it is explained in the following KB:

https://kc.mcafee.com/corporate/index?page=content&id=KB59342

Also make sure that no SSL Inspection is being done while the NSM server and the McAfee update servers are communicating.

Regards,