Article - CS370755

Error "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target" occurring in Windchill PDMLink

Modified: 19-Sep-2025   


Applies To

  • Windchill PDMLink 11.0 to 13.1
  • Windchill Navigate (formerly ThingWorx Navigate) 8.5.3 to 9.7

Description

  • Users are unable to Login into Windchill with the following error
  • Add participants to the table show the following error on UI  
    ### INFO  wt.system.err ### - javax.naming.CommunicationException: simple bind failed:  [Root exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
  • Invoke query builder API to search object with the following error 
    wt.httpgw.HTTPAuthentication - HTTP login failed: client host = 10.xxx.xxx.xxx
  • Failed to call RMI below error after upgrade
    Exception in thread "main" wt.util.WTRemoteException: Unable to invoke remote method; nested exception is:
    	javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    ...
    Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    
  • User is getting below error while authentication command is executed when SSO is enabled
[main] DEBUG wt.httpgw.HTTPLogin - Opening URL connection to https://aaa.bbb.ccc/Windchill/servlet/WindchillAuthGW/wt.httpgw.HTTPAuthentication/login
[main] DEBUG wt.httpgw.HTTPLogin - Unexpected content type: null
[main] DEBUG wt.httpgw.HTTPLogin - Failed to get input stream from connection
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
       
        at wt.auth.Authentication.main(Authentication.java:235) [codebase/:?]
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
     
  • wt.auth.Authentication is not working after enabling cluster to use SSL certificates
  • wt.auth.Authentication command fails with the below error:
    DEBUG wt.httpgw.HTTPLogin - Failed to get input stream from connection
    javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.ssl.Alert.createSSLException(Alert.java:131)
  • wt.auth.Authentication is not working while loading OIRs via LoadFileSet command lines, it reports the following error
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target reactor
  • Some of the vault mount locations are failing validation after the certificates are imported into the Java Keystore
  • After configuring Remote File Server (RFS) Broadcast configuration failing 
  • Unable to upload file on Windchill, getting below error
ERROR [pool-12-thread-2] wt.fv.FvMountValidator  - javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target reactor.core.Exceptions$ReactiveException: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
                       at reactor.core.Exceptions.propagate(Exceptions.java:396)
                       at reactor.core.publisher.BlockingSingleSubscriber.blockingGet(BlockingSingleSubscriber.java:97)
                       at reactor.core.publisher.Mono.block(Mono.java:1707)
                       at com.azure.storage.common.implementation.StorageImplUtils.blockWithOptionalTimeout(StorageImplUtils.java:191)
                       at com.azure.storage.blob.specialized.BlobClientBase.getPropertiesWithResponse(BlobClientBase.java:1305)
                       at com.azure.storage.blob.specialized.BlobClientBase.getProperties(BlobClientBase.java:1274)
                       at com.ptc.windchill.objectstorage.azureblob.BlobContentFile.getProperties(BlobContentFile.java:585)
                       at com.ptc.windchill.objectstorage.azureblob.BlobContentFile.loadAttributes(BlobContentFile.java:276)
                       at com.ptc.windchill.objectstorage.azureblob.BlobContentFile.exists(BlobContentFile.java:123)
                       at wt.fv.FvMountValidator.validateFvMountPath(FvMountValidator.java:931)
                       at wt.fv.FvMountValidator$ValidateOnThisMSTask.call(FvMountValidator.java:2969)
                       at wt.fv.FvMountValidator$ValidateOnThisMSTask.call(FvMountValidator.java:2943)
                       at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
                       at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
                       at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
                       at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
                       at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
                       at java.base/java.lang.Thread.run(Thread.java:829)
                       Suppressed: java.lang.Exception: #block terminated with an error
                                      at reactor.core.publisher.BlockingSingleSubscriber.blockingGet(BlockingSingleSubscriber.java:99)
                                      ... 16 more
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
  • Certificate issues reported on MethodServer logs
  • Publishing is failing with below error traces in MethodServer log
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
  • Unable to add configurable link examples to Windchill environment
This is a printer-friendly version of Article 370755 and may be out of date. For the latest version click CS370755