# Another "Failed to Validate Certificate" thread

**URL:** <https://forum.inductiveautomation.com/t/another-failed-to-validate-certificate-thread/6142>\
**Category:** Ignition\
**Created:** [April 3, 2013, 4:22am UTC](https://forum.inductiveautomation.com/t/another-failed-to-validate-certificate-thread/6142 "2013-04-03T04:22:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Cas](https://avatars.discourse-cdn.com/v4/letter/c/77aa72/32.png) [@Cas](https://forum.inductiveautomation.com/u/Cas)\
**Post date:** [April 3, 2013, 4:22am UTC](https://forum.inductiveautomation.com/t/another-failed-to-validate-certificate-thread/6142/1 "2013-04-03T04:22:56Z")

</div>

Hi guys, I just updated everything on my developer machine:  
Ignition: 7.5.6  
Java 7.17 (interestingly, on the Gateway \> Configure \> Status page, it shows my Java Version as: “Sun Microsystems Inc. 1.6.0\_18”)

I am getting this dreaded fatal error with the following details, when trying to launch the Designer:[quote]sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Check netscape extension value failed in certificate  
at sun.security.validator.PKIXValidator.doValidate(Unknown Source)  
at sun.security.validator.PKIXValidator.doValidate(Unknown Source)  
at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)  
at sun.security.validator.Validator.validate(Unknown Source)  
at sun.security.validator.Validator.validate(Unknown Source)  
at com.sun.deploy.security.TrustDecider.validateChain(Unknown Source)  
at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)  
at com.sun.javaws.security.AppPolicy.grantUnrestrictedAccess(Unknown Source)  
at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResourcesHelper(Unknown Source)  
at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResources(Unknown Source)  
at com.sun.javaws.Launcher.prepareResources(Unknown Source)  
at com.sun.javaws.Launcher.prepareAllResources(Unknown Source)  
at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)  
at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)  
at com.sun.javaws.Launcher.launch(Unknown Source)  
at com.sun.javaws.Main.launchApp(Unknown Source)  
at com.sun.javaws.Main.continueInSecureThread(Unknown Source)  
at com.sun.javaws.Main.access$000(Unknown Source)  
at com.sun.javaws.Main$1.run(Unknown Source)  
at java.lang.Thread.run(Unknown Source)  
Caused by: java.security.cert.CertPathValidatorException: Check netscape extension value failed in certificate  
at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(Unknown Source)  
at sun.security.provider.certpath.PKIXCertPathValidator.doValidate(Unknown Source)  
at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(Unknown Source)  
at java.security.cert.CertPathValidator.validate(Unknown Source)  
… 20 more  
[/quote]

I checked the Java settings:  
“Check certificates for revocation using Certificate Revocation Lists (CRLs)”  
“Enable online certification validation”  
and they were both unchecked.

I only installed the Typical installation, and after getting the certificate error, I uninstalled and reinstalled to no avail.

Any suggestions on how I can fix this? I can’t do any work until it is fixed.

Thanks in advance,  
Cas

---

<div class="post-metadata">

**Author:** ![Robert](https://avatars.discourse-cdn.com/v4/letter/r/e95f7d/32.png) [@Robert](https://forum.inductiveautomation.com/u/Robert)\
**Post date:** [April 3, 2013, 3:35pm UTC](https://forum.inductiveautomation.com/t/another-failed-to-validate-certificate-thread/6142/2 "2013-04-03T15:35:58Z")

</div>

Your gateway is using java 1.6.  
You must have two versions installed and it’s finding the old version.  
Find the old version and delete it.

If you really need the old version (say for the mobile module) there is a gateway config file called ignition.conf in the data directory where you can edit where to find java.

---

<div class="post-metadata">

**Author:** ![Cas](https://avatars.discourse-cdn.com/v4/letter/c/77aa72/32.png) [@Cas](https://forum.inductiveautomation.com/u/Cas)\
**Post date:** [April 4, 2013, 2:31am UTC](https://forum.inductiveautomation.com/t/another-failed-to-validate-certificate-thread/6142/3 "2013-04-04T02:31:04Z")

</div>

Robert,  
Thank you. Uninstalling the old version and then reinstalling Ignition worked (although now I’m in Emergency Activation Mode… I’ll call in to have that fixed).

Cas