Inventory Beacon fails to upload packages to FlexNet Manager Suite Cloud, error is "The remote certificate is invalid according to the validation procedure"

[#1]

Summary

Inventory Beacon fails to upload packages to FlexNet Manager Suite Cloud, error is "The remote certificate is invalid according to the validation procedure"

Symptoms

Inventory Beacon fails to upload packages to FlexNet Manager Suite Cloud, like the following error is logged in "C:\ProgramData\Flexera Software\Compliacne\Ligging\CompliaceUpload\upload.log".

2018-04-17 14:14:25,072 [Upload.UploadProcess ] [ERROR] Package upload failed
Flexera.SaaS.Transport.Core.ComplianceApiException: Could not retrieve token (An error occurred while sending the request.) ---> System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.TlsStream.EndWrite(IAsyncResult asyncResult)
at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult asyncResult, TransportContext& context)
at System.Net.Http.HttpClientHandler.GetRequestStreamCallback(IAsyncResult ar)
--- End of inner exception stack trace ---
--- End of inner exception stack trace ---
at Flexera.SaaS.Transport.Upload.UploadClient.CreateUploadToken(String fileName)
at Flexera.SaaS.Transport.Upload.UploadClient.UploadSegment(FileSegment segment)
at Flexera.SaaS.Transport.Upload.UploadProcess.TryUpload(UploadClient client, UploadedPackageFile package, Action notifySuccessfulConnection)
at Flexera.SaaS.Transport.Upload.UploadProcess.Retry(String actionName, Func`2 action, Int32 times)
at Flexera.SaaS.Transport.Upload.UploadProcess.ProcessPackage(UploadedPackageFile package)
at Flexera.SaaS.Transport.Upload.UploadProcess.ProcessPackageList(Int32 exitCode, List`1 packages)

Cause

The beacon server cannot validate the current server certificate of beacon.flexnetmanager.com. The certfication path of *.flexnetmanager.com is:

DigiCert > DigiCert SHA 2 Secure Server CA > *.flexnetmanager.com

Therefore a cause of the error is that DigiCert or/and DigiCert SHA 2 Secure Server CA is/are not in a cert store of the beacon server.

Generally, these root certs and intermediate certs are updated by Windows update automatically, but if the server did not apply the update which includes cert update, this issue occurs.

Resolution

These certs can be download from https://www.digicert.com/digicert-root-certificates.htm.
Please download them and import them to the cert store of the beacon server.