SSL Provider, error: 0 - The certificate chain was issued by an authority that is not trusted.

(0) Share

Report

Posted on by Huggins Mafigu

507

I am doing a certificate rotation process for D365FO(on-premise). I just completed generating the SQL Server certificate. Now the problem comes when deploying. The AXSFType is displaying this error:

'System.RA' reported Warning for property 'ReplicaOpenStatus'.

 Replica had multiple failures during open on AOS-02. API call: IStatelessServiceInstance.Open(); Error = Microsoft.Dynamics.AXService.Database.DBSyncInvokeException (-2146233088)

DBSync failed. Please check the logs.
at Microsoft.Dynamics.AXService.Database.States.DBSyncFailedState.ApplyThenTransition()
at Microsoft.Dynamics.AXService.AXService.Synchronize(String codePackageVersion, ILogger logger)
at Microsoft.Dynamics.AXService.AXService.<>c__DisplayClass9_0.<.ctor>b__0()

The AOS event logs are showing the below events

02/03/2021 16:34:38: Caught unexpected exception: System.AggregateException: Unable to connect to SQL server. ---> System.Data.SqlClient.SqlException: A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The certificate chain was issued by an authority that is not trusted.) ---> System.ComponentModel.Win32Exception: The certificate chain was issued by an authority that is not trusted --- End of inner exception stack trace --- at System.Data.SqlClient.SqlInternalConnectionTds..ctor(...)

Anyone with the idea how to solve the "SSL Provider, error: 0 - The certificate chain was issued by an authority that is not trusted."?

I have the same question (0)

All responses (4)

Answers (1)

Suggested answer

André Arnaud de Cal... 300,917 Super User 2025 Season 2 on at

Like (0)

Report

Hi Huggins,

Have you performed all steps like outlined in the documentation? Certificate rotation - Finance & Operations | Dynamics 365 | Microsoft Docs

Also ensure you are not using a self-signed certificate on a production environment.

Was this reply helpful? Yes No
Suggested answer

ergun sahin 8,826 Moderator on at

Like (0)

Report

"To resolve this error, add the public key SQL Server certificate to all the Service Fabric nodes."

docs.microsoft.com/.../troubleshoot-on-prem

Was this reply helpful? Yes No
WillWU 22,361 on at

Like (0)

Report

Hi Huggins Mafigu,

Please read this document ,"gateway fails to deploy". Your error message is documented under this topic.

Reason: The pointers to the performance counter that the gateway needs may be corrupt.

Resolution: Run lodctr /R in a Command Prompt window that you open as administrator in all AOS nodes where the gateway is unhealthy. If you receive an error message that states that the performance counters can't be rebuilt, try to run the command again.

Refer to:docs.microsoft.com/.../troubleshoot-on-prem

Was this reply helpful? Yes No
Verified answer

Huggins Mafigu 507 on at

Like (0)

Report

Hie guys,

"Adding the public key SQL Server certificate to all the Service Fabric nodes" only did not solve my problem. I added the .cert to the Trusted Root Certification Authorities of all the nodes i.e. AOS nodes, OR nodes, MR and SSRS nodes. And the error cleared away.

Was this reply helpful? Yes No