KNOWLEDGE BASE

Errors "Access is denied" or "PKIX pathbuilding failed" Signing into SSL-Enabled Tableau Server using tabcmd


Published: 14 Oct 2016
Last Modified Date: 03 Mar 2020

Issue

When signed in to an ssl-enabled server with tabcmd, running a command may return the following errors: 

Top level exception caught:
java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target​



OR 

Uncaught exception RuntimeException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors

OR

Uncaught exception RuntimeException: java.io.IOException: java.security.KeyStoreException: Access is denied.
 
 

Environment

  • Tableau Server
  • tabcmd
  • SSL

Resolution

1. Add the tabcmd global option '--no-certcheck' to the end of the command. For example, if "tabcmd listdomains" is the command, run "tabcmd listdomains --no-certcheck" instead. 

For details on other tabcmd global options, see tabcmd Global Options.

2. Install intermediate certificate in Tableau Server machine or client that is running tabcmd command


 

Cause

This normally happens when the chain or Intermediate Certificate is not installed on the computer where the tabcmd is running.

 
Did this article resolve the issue?