Hi, I stumbled across this while searching the same error, and thought I'd provide an answer in case someone else comes along from the first hit in their favorite search engine. 🙂 Have you tried doing exactly what it says to do? Specifically, here's the process on my own machine. Note I'm starting out in /opt/splunk/etc/auth. From there, let's find the path of the sslRootCAPath file specified in server.conf splunk@curie:/opt/splunk/etc/auth$ grep sslRootCAPath ../system/local/server.conf
sslRootCAPath = /opt/splunk/etc/auth/mycerts/chain.pem Now that I know the active cert, I can make a backup copy of it just in case splunk@curie:/opt/splunk/etc/auth$ cp mycerts/chain.pem mycerts/chain.pem.2024-01-24 then append appsCA.pem to that file and restart Splunk. splunk@curie:/opt/splunk/etc/auth$ cat appsCA.pem >> mycerts/chain.pem
splunk@curie:/opt/splunk/etc/auth$ splunk restart Worked like a charm.
... View more