Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Configuration Wizard Database Setup - Error Certificate Issued by an Authority That Is Not Trusted

I'm working on a new installation of NPM and a (new installation) dedicated (separate) DB.

After the installation I get this error message:

Any suggestions as to how to fix it? I've enabled "Windows Authentication" on the SQL server> Security settings and reset but didn't make any difference. Still getting the error.

Thanks

Find more posts tagged with

Accepted answers

All comments

aLTeReGo

It sounds like you have self-signed certificate in use on your SQL server that's not trusted on this client I would suggest either not using encryption, or copy the certificate to this machine you're seeing the error on and open it to see which CA in the chain is untrusted. Then import any trusted root certificates into the trusted root CAs of the local system, and any other certificates into the personal store of the local system (not user)

Ckesey

How do I disable encryption on the Application server (that I'm running the Configuration Wizard on)? I've tried checked and uncheck "Encrypt Connections with SSL" which also gives me access to "Trust Server Certificate". No combination of these checkboxs will allow me to connect.

I can also try exporting a certificate from the DB server to the App server but when I go into the MMC I don't have a certificate option (to the left) like most of the comments have said:

aLTeReGo

Unchecking 'Encrypt Connections with SSL' should disable encryption, unless it's being forced/required on the server side. Checking the 'Trust server certificate' should ignore errors when a self-signed certificate is used. However, from the error Windows is returning, it sounds like one of the intermediary CAs in the chain is untrusted.

Usually this can be fixed simply by applying all available Windows Updates, as this is how Microsoft distributes the latest root certificate authority updates.

On the SQL server where you have the MMC opened,

From the File menu, select Add/Remove Snap In.
The Add or Remove Snap-ins window appears.
From the Available snap-ins list, choose Certificates, then select Add.

In the Certificates snap-in window, select Computer account, and then select Next.

In the Add or Remove Snap-in window, select OK.

To view your certificates in the MMC snap-in, select Console Root in the left pane, then expand Certificates (Local Computer).

A list of directories for each type of certificate appears. From each certificate directory, you can view, export, import, and delete its certificates.

Ckesey

I just checked the App and DB servers. The DB server is up to date however there were some updates to the App that needed installing. Those are downloading and installing now. I was able to add in the Snap-in MMC the Certificates and have several folders under "Local Computer". Should I export one of these and transfer it over to the App server?