Ssl Handshake Exception Or Pkix Path Building Failed Upon Signing In Tableau Server From Tableau Prep Or Tableau Desktop

Issue

The following certificate error occurs when signing in to Tableau Server from Tableau Prep Builder, Tableau Desktop for Mac or Tableau Mobile:

SSL handshake exception thrown when connecting to host https://<TableauServer>, message: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"}

Related error can be found on Tableau Prep Logs - preprestapi.log

Environment

Tableau Server
Tableau Prep Builder
Tableau Desktop for Mac.
Tableau mobile

Resolution

Check and make sure the chain file has been converted after the concatenated chain (.pem) file creation.

e.g: (Common command used)
openssl x509 -outform der -in chain.pem -out chain.crt

Resolution steps:
1. Re-generate the chain file key (.pem)
2. Rename the chain file from (.pem) to (.crt)
3. Import the chain file to Tableau Server (Configure SSL for External HTTP Traffic to and from Tableau Server)

Cause

Chain file is not properly encoded from .pem to .crt file.

Note: Tableau SSL certificate requirements
+ All certificates in the file must be x509 PEM-encoded and the file must have a .crt extension (not .pem).
SSL certificate requirements