Exchange agent is unable to monitor target Exchange server due to invalid certificate for Domain Controller (4275268)

Exchange agent is unable to monitor target Exchange server due to invalid certificate for Domain Controller

Exchange agent is unable to monitor target Exchange server due to invalid certificate for Domain Controller. Below error message is logged in Agent log file:

2017-09-06 17:47:21.956 ERROR   [Quartz[0]-3288] com.quest.agent.service.ldap.LDAPEndPoint - Credential LDAP connectivity test failed:  error message: javax.naming.CommunicationException:servername:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]

Exchange Agent collects some of the data from a Domain Controller using LDAP queries. If the agent is configured to do secured LDAP communication (over port 636) with the Domain Controller then a valid certificate needs to be imported on the Agent Manager (FglAM) server that is hosting Exchange agent otherwise a communication failure will occur resulting in above error message.

Please follow instructions provided in Exchange cartridge Release notes to import a certificate properly for secure LDAP communication.