Bentley Communities
Bentley Communities
  • Site
  • User
  • Site
  • Search
  • User
  • Welcome
  • Products
  • Support
  • About
  • More
  • Cancel
Licensing and Activation
  • Product Communities
  • More
Licensing and Activation
Licensing and Activation Wiki Deployed SELECTserver issue with new Bentley SSL certificate
    • Sign in
    • License Flowchart for Subscription Entitlement Service (SES) and legacy SELECTserver
    • +Understanding the Subscription Entitlement Service (SES) Workflow
    • Working from Home using Bentley Licensing
    • EVD Reporting Guide
    • -Understanding the (Legacy) SELECTserver Workflow
      • -SELECTserver TechNotes and FAQs
        • "An Error Has Occurred" when manually transmitting usage logs using a preconfigured URL
        • About SELECTserver
        • Connecting to the Bentley servers through Firewalls and Proxy Servers [FAQ]
        • Could not load type 'System.ServiceModel.Activation.HttpModule' from assembly 'System.ServiceModel...'
        • Data Update Service Warning [TN]
        • Database Maintenance
        • Database Setup Tool Configuration and Explanation [FAQ]
        • Deployed SELECTserver Database and Internet Connectivity Insight [TN]
        • Deployed SELECTserver issue with new Bentley SSL certificate
        • Deployed SELECTserver Knowledge Requirements [TN]
        • Deployed SELECTserver Technical Requirements [TN]
        • Enabling Diagnostic Logging for SELECTserver
        • Error 1068: Cannot start the Bentley SELECTserver service
        • Error 417 : in SELECTserver and GateWay logs
        • Glossary Of Licensing Terms [FAQ]
        • Group Policy Administration (ADM) files
        • How do I keep usage reports current?
        • How do I set up or prevent license checkouts?
        • How to create a new website in IIS7
        • How to create a Virtual Directory in IIS7
        • How To Install a Gateways on Vista and Windows 7, Server 2008
        • How to Install the SELECTserver application
        • How to migrate users to a custom activation group
        • HTTP Error 404.13 "The request filtering module is configured to deny a request that exceeds the request content length" when importing response file
        • HTTP Error 500.21 - Internal Server Error on SELECTserver Administrative Site
        • Import xml File on Deployed Server
        • IP Address Hosted Server
        • License and SELECTserver Administration [FAQ]
        • +License Manager
        • License Tool Command Line Options
        • Manual Installation of SQL Express (2008 - 2012)
        • Moving (relocating) the SELECTserver application to a new server.
        • Moving Your SELECTserver Database
        • +Older SELECTserver Versions
        • Opening Admin site pager starts (runs) installer process
        • Opening Administration Site
        • Restricting access to a deployed SELECTserver Administration Site. Configuration example (video).
        • Running the Data Update Service and restarting IIS in order to immediately update a deployed license
        • Schedule Report - no Parameter selectable
        • Security [FAQ]
        • SELECT Server 08 11 Series [CS]
        • +SELECTserver
        • SELECTserver 9 Known Issues
        • SELECTserver 9.xx.xx.xx Gateway Update Process [FAQ]
        • SELECTserver 9.xx.xx.xx Upgrade Information [FAQ]
        • SelectServer Client Access Restrictions technical overview (video).
        • SELECTserver Database Backup [TN]
        • +SELECTserver Gateway
        • SELECTserver Gateway error 1053
        • SELECTserver Gateway Explained
        • SELECTserver Gateway License Server Revoked License [TN]
        • SELECTserver Gateway Service Fails To Connect through Proxy Server [TN]
        • SELECTserver General [FAQ]
        • SELECTserver in a IPV6 Environment
        • SELECTserver Notifications
        • SELECTserver Online Technical Requirements [FAQ]
        • SelectServer V9 without connectivity and Bentley Passport
        • SELECTserver XM Database Backup [TN]
        • Server status - Log file
        • SQL Server 2005 Cachestore Flush Error
        • SQL Server Compatibility Mode - Internal Query Processor Error
        • Support Path User Registration [FAQ]
        • The response file corresponding to the following logs is not processed.
        • The SQL transaction logs are full
        • Transmit Usage Logs - 0 Logs Found To Process [TN]
        • Trust Licensing Basics [FAQ]
        • Unlock the SQL Server SA Account
        • Upgrading to SELECTserver 08 11 series [CS]
        • Upgrading to SELECTserver 08.11.xx.xx [TN]
        • Uploading SELECTserver Usage And Client Logs [TN]
        • Usage Log Processing - ERROR with status code 15014
        • Using Active Directory Group Policy Objects to Configure Licensing for Users Centrally (video).
        • What options are available to allow the external (WAN) user to access a Locally Deployed SELECTserver?
        • What's New in the latest SELECTserver?
    • +Product Activation TechNotes and FAQs
    • +Application Usage TechNotes and FAQs
    • +SELECTservices TechNotes and FAQs

     
     Questions about this article, topic, or product? Click here. 

    Deployed SELECTserver issue with new Bentley SSL certificate

       
      Applies To 
       
      Product(s): SELECTserver
      Version(s): N/A
      Environment:  N/A
      Area:  N/A
      Subarea:  N/A
      Original Author: John Lee, Bentley Technical Support Group
       

    Overview:

    In the use case, the deployed SELECTserver running transmitting log encounters the following message.

    Data Update Service - WARNING with status code 2 - service start time: - An error occurred retrieving the license
    from Bentley.com: - A server certificate could not be validated.

     

    Problem Description

    "A server certificate could not be validated" error for Data Update Service and Request/Update License

    The same issue may affect SELECTserver (SS) Gateway only against hosted, in this case in SS GW log:

    Error checking SELECTserver (SS) version: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

    This happens only if SS or SS GW is configured to talk with bentley.com in HTTPS.

    Solution

    This may happen when user's system does not trust the Certification Authority that issued the certificate. The Certification Authority information is kept in the registry. The list of Certification Authorities is kept up-to-date by Windows Update utility.

    To resolve this issue run the installcert.bat file (provided in the SSCertinstall.zip package).

    Once the files have been extracted from the zip run the installcert.bat file. When using the Windows 7 or Server 2008 operating system because of the User Access Control (UAC) you must RIGHT-CLICK on the file and choose the "Run “As Administrator” option to properly execute the bat file.

    The SSCertinstall.zip file can be found at:

    https://communities.bentley.com/products/licensing/m/licensing_gallery/270340

    Note: The SSCertinstall.zip package contains the following files: CertMgr.exe, digicert.cer, digicert_int_ca.cer and the installcert.bat files

     

    • SELECTserver
    • SELECTsupport
    • Problem Solving
    • Share
    • History
    • More
    • Cancel
    • john.lee Created by john.lee
    • When: Fri, Jul 19 2013 6:47 PM
    • jeremyhoesly Last revision by Bentley Colleague jeremyhoesly
    • When: Fri, May 22 2015 5:51 PM
    • Revisions: 8
    • Comments: 0
    Recommended
    Related
    Communities
    • Home
    • Getting Started
    • Community Central
    • Products
    • Support
    • Secure File Upload
    • Feedback
    Support and Services
    • Home
    • Product Support
    • Downloads
    • Subscription Services Portal
    Training and Learning
    • Home
    • About Bentley Institute
    • My Learning History
    • Reference Books
    Social Media
    •    LinkedIn
    •    Facebook
    •    Twitter
    •    YouTube
    •    RSS Feed
    •    Email

    © 2021 Bentley Systems, Incorporated  |  Contact Us  |  Privacy |  Terms of Use  |  Cookies