Microsoft Authenticator node, Error PKIX path building failed

[GQRanalytics]

Hello!

I Recently got approvals to connect to sharepoint using the microsoft authenticator node, it was working fine until I got to the office, where when we connect to the Corporate network we get the following error message: “ERROR Microsoft Authenticator 3:4 Execute failed: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.”

The problem only occurs when connected to that specific network, when working from home, or sharing internet from our cellphones it works without issues, so that points me that is something related to network configuration, I have raised a ticket with out IT team but they are not finding whats causing the issue… can someone help me with this issue?

[hotzm]

Hi @GQRanalytics,

your error message sounds like this video that @marvin.kickuth shared may help:

Cannot drag and drop new nodes in workbench

For certificate issues (PKIX path building), this may also help: [Resolving Common KNIME Certificates Problems] Kind regards Marvin

Best,
Manuel

[marvin.kickuth]

Hi @GQRanalytics

A quick addition/alternative in case if you’re on Windows, try appending these two parameters to the end of your knime.ini:

-Djavax.net.ssl.trustStore=NONE
-Djavax.net.ssl.trustStoreType=WINDOWS-ROOT

Details and Mac, see the thread here:

Help with the Extensions

Hello future reader I’d like to add one more option to the ones above when facing “PKIX path building failed” issues. Again, these issues are often caused by a company proxy intercepting SSL certificates in order to monitor encrypted traffic. Possibly, the proxy’s certificate has already been preconfigured in Windows by your IT. In that case you can simply instruct KNIME to use the Windows trust store. To do so, add these two lines at the end of the knime.ini file which is locat…

Kind regards
Marvin

[GQRanalytics]

Thanks!!! this one did the trick and Im able to connect now without issues!!!

I really didnt tested the other option of importing the certificate because was kind of advanced for me, so really dont know if it will work!!
[/quote]

[hotzm]

Marvin’s solution will also survive a KNIME update in which we upgrade the JRE we ship.