TACO Signature Verification Fails with Error "Path does not chain with any of the trust anchors"

Issue

When creating a connection using a connector built with the Tableau Connector SDK, the following error may occur:

Error Code: 14D18B1F
Package signature verification failed during connection creation.

Additionally, the following error messages are found in log.txt in the Tableau Desktop logs folder:

Taco is unsigned or the signer certificate is not trusted.
Path does not chain with any of the trust anchors

Environment

Tableau Desktop

Resolution

1. Examine the Tableau Desktop log file (log.txt) for the signer certificate chain. For example, the following lines can be found in the logs when using the Starburst Enterprise connector file:

Signed by:
CN="Starburst Data\\, Inc.", O="Starburst Data\\, Inc.", L=Boston?, ST=Massachusetts, C=US
CN=SSL.com Code Signing Intermediate CA RSA R1, O=SSL Corp, L=Houston, ST=Texas, C=US
CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

2. Work with your IT team to locate a reliable source for the root certificate (the last certificate in the list), and install the certificate in the system trust store. In the above example, the root certificate is Certum Trusted Network CA and the certificate (CTNCA.crt) can be downloaded from the Certum root certificate repository.

Cause

The root certificate used for signing the connector.taco package is not present in the system trust store.

Additional Information

To install a certificate in the system trust store:

For Windows

Click the Windows Start icon and search for "certificates".
Select Manage computer certificates.
In the left panel of the certlm window, navigate to Trusted Root Certification Authorities > Certificates.
From the Action menu, select All Tasks > Import.
In the Certificate Import Wizard, click Next.
Browse to find the downloaded certificate file, select the file and click Open > Next.
The option to place the certificate in Trusted Root Certification Authorities should be selected. Click Next > Finish.

For Mac

See this Apple support article for instructions to install a certificate.
Note:

Import the certificate into the "System" keychain (not "System Roots").
Enable trust as follows:
- In the Keychain App, right-click the new certificate.
- Select Get Info.
- In the dialog, open the Trust section, and then select When using this certificate always trust.