アーティクル - CS279913
「信頼されていない資格情報のため、PKIXパスの構築に失敗しました: [subjectName='CN=<domain> O=<org> 、C=<country> ThingWorx の PingFederate SSL/TLS を構成または更新するときに、「']: 要求されたターゲットへの有効な証明書パスが見つかりません」というエラーが表示されます。
修正日: 22-Sep-2025
適用対象
- Windchill Navigate (formerly ThingWorx Navigate) 1.5.0 to 9.4
- ThingWorx Platform 8.1 to 9.4
- PingFederate
説明
- PingFederateでSSOを設定中に、ThingWorx NavigateでSSLハンドシェイクエラーが発生し、ログインに失敗します
- ThingWorx Javascript サービスGetJSONから REST API を呼び出そうとすると、 PKIX パスの構築に失敗して失敗します。 または信頼できない資格情報エラーのため PKIX パスの構築に失敗しました
- ThingWorx ライセンスの更新後、アプリケーションが次のエラーで失敗し、ユーザーは SSO を使用してログインできなくなります。
[L: ERROR] [O: o.s.s.s.t.MetadataCredentialResolver] [I: ] [U: ] [S: ] [P: ] [T: Metadata-reload] PKIX path construction failed for untrusted credential: [subjectName='CN=<domain>O=<organization>,C=<country>']: unable to find valid certification path to requested target
- ThingWorx ログ内に次のエラーが表示されます。
- <ThingworxStorage>\logs\SecurityLog.log
[ Error requesting access token. ][ I/O error on POST request for "https://PINGFEDERATE_HOST_NAME/as/token.oauth2": sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target ][ sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target ] [ PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target ] [ unable to find valid certification path to requested target ]
- <ThingworxStorage>\logs\ErrorLog.log
[O: E.c.q.l.c.Logger] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-7] [ Failed to utilize the SSO component for authentication ] [ Error requesting access token. ][ I/O error on POST request for "https://<Ping Fed Host>:443/as/token.oauth2": sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target ] [ sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target ][ PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target ][ unable to find valid certification path to requested target ] [L: ERROR] [O: E.c.q.l.c.Logger] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-7] Could not handle request [L: ERROR] [O: E.c.q.l.c.Logger] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-7] Could not handle request [L: ERROR] [O: E.c.q.l.c.Logger] [I: ] [U: ???] [S: ] [P: ] [T: https-jsse-nio-8443-exec-7] errorMessage: [Unauthorized], statusCode: [401]
最新バージョンはこちらを参照ください CS279913