A new Spotfire Node Manager does not come online with the following message "Unable to use certificate to contact the server at Node"

A new Spotfire Node Manager does not come online with the following message "Unable to use certificate to contact the server at Node"

book

Article ID: KB0070492

calendar_today

Updated On:

Products Versions
Spotfire Server 7.5 and higher

Description

When adding a new Node Manager to your Spotfire environment, the initial trust of the Node Manager is successful but after a few minutes, it shows it is offline. On the Node Manager machine, look at the nm.log file. You may see the following:
INFO 2017-11-03T21:35:41,224-0500 [] nodemanager.trust.DelayUntilAuthorizedGate: Unable to use certificate to contact the server at Node [serverId=00000000-0000-0000-0000-000000000000, serverName=tss1.tibco.com, port=9443, online=true, siteID=00000000-0000-0000-0000-000000000000] on port 9443: I/O error on POST request for "https://tss1.tibco.com:9443/spotfire/nodemanager/messages": sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date; nested exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date

 

Issue/Introduction

In this article you will see what may prevent a new Node Manager from starting and how to resolve it.

Resolution

This indicates that the date / time on the Node Manager machine is different than the Spotfire Server machine. Adjust the time and restart the services. For Windows machines, the machine times can be kept synchronized by enabling the Windows Time service (w32time) on all servers.

Additional Information

Windows Time Service: