1. Home
  2. Support
Article - CS307827

Error “unable to find valid certification path to requested target” in ThingWorx Navigate

Modified: 01-Sep-2025   


Applies To

  • Windchill Navigate (formerly ThingWorx Navigate) 1.8.0 to 10.0
  • ThingWorx Platform 9.0

Description

  • Error unable to find valid certification path to requested target in ThingWorx Navigate
  • Errors in IntegrationRuntime.log:
2019-03-06 15:30:35.309 [NettyClient-NIO-1] WARN  c.t.c.c.c.n.ThingworxClientConnectionHandler - [ClientHandler: 1728035947] SSLHandshake Exception, websocket not created:
javax.net.ssl.SSLHandshakeException: General SSLEngine problem
.
.
.
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
  • ThingWorx truststore contains correct Windchill and Navigate certificates and chains of trust
  • Tomcat is configured for SSL
  • Tomcat has its own keystore and unique keypair
  • Windchill and Tomcat certificates have been imported into Java truststore (e.g., cacerts)
  • ThingWorx Composer is not accessible and status code 511 returned
    • Error in ApplicationLog
      • PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
This is a printer-friendly version of Article 307827 and may be out of date. For the latest version click CS307827