Article - CS370755
Error "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target" occurring in Windchill PDMLink
Modified: 19-Sep-2025
Applies To
- Windchill PDMLink 11.0 to 13.1
- Windchill Navigate (formerly ThingWorx Navigate) 8.5.3 to 9.7
Description
- Users are unable to Login into Windchill with the following error
- Add participants to the table show the following error on UI
### INFO wt.system.err ### - javax.naming.CommunicationException: simple bind failed: [Root exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
- Invoke query builder API to search object with the following error
wt.httpgw.HTTPAuthentication - HTTP login failed: client host = 10.xxx.xxx.xxx
- Failed to call RMI below error after upgrade
Exception in thread "main" wt.util.WTRemoteException: Unable to invoke remote method; nested exception is: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target ... Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- User is getting below error while authentication command is executed when SSO is enabled
[main] DEBUG wt.httpgw.HTTPLogin - Opening URL connection to https://aaa.bbb.ccc/Windchill/servlet/WindchillAuthGW/wt.httpgw.HTTPAuthentication/login
[main] DEBUG wt.httpgw.HTTPLogin - Unexpected content type: null
[main] DEBUG wt.httpgw.HTTPLogin - Failed to get input stream from connection
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at wt.auth.Authentication.main(Authentication.java:235) [codebase/:?]
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- wt.auth.Authentication is not working after enabling cluster to use SSL certificates
- wt.auth.Authentication command fails with the below error:
DEBUG wt.httpgw.HTTPLogin - Failed to get input stream from connection javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.ssl.Alert.createSSLException(Alert.java:131) - wt.auth.Authentication is not working while loading OIRs via LoadFileSet command lines, it reports the following error
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target reactor
- Some of the vault mount locations are failing validation after the certificates are imported into the Java Keystore
- After configuring Remote File Server (RFS) Broadcast configuration failing
- Unable to upload file on Windchill, getting below error
ERROR [pool-12-thread-2] wt.fv.FvMountValidator - javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target reactor.core.Exceptions$ReactiveException: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at reactor.core.Exceptions.propagate(Exceptions.java:396)
at reactor.core.publisher.BlockingSingleSubscriber.blockingGet(BlockingSingleSubscriber.java:97)
at reactor.core.publisher.Mono.block(Mono.java:1707)
at com.azure.storage.common.implementation.StorageImplUtils.blockWithOptionalTimeout(StorageImplUtils.java:191)
at com.azure.storage.blob.specialized.BlobClientBase.getPropertiesWithResponse(BlobClientBase.java:1305)
at com.azure.storage.blob.specialized.BlobClientBase.getProperties(BlobClientBase.java:1274)
at com.ptc.windchill.objectstorage.azureblob.BlobContentFile.getProperties(BlobContentFile.java:585)
at com.ptc.windchill.objectstorage.azureblob.BlobContentFile.loadAttributes(BlobContentFile.java:276)
at com.ptc.windchill.objectstorage.azureblob.BlobContentFile.exists(BlobContentFile.java:123)
at wt.fv.FvMountValidator.validateFvMountPath(FvMountValidator.java:931)
at wt.fv.FvMountValidator$ValidateOnThisMSTask.call(FvMountValidator.java:2969)
at wt.fv.FvMountValidator$ValidateOnThisMSTask.call(FvMountValidator.java:2943)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:829)
Suppressed: java.lang.Exception: #block terminated with an error
at reactor.core.publisher.BlockingSingleSubscriber.blockingGet(BlockingSingleSubscriber.java:99)
... 16 more
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- Certificate issues reported on MethodServer logs
- Publishing is failing with below error traces in MethodServer log
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
- Unable to add configurable link examples to Windchill environment
This is a printer-friendly version of Article 370755 and may be out of date. For the latest version click CS370755