# Java Error: Failed to validate certificate

**URL:** <https://forum.inductiveautomation.com/t/java-error-failed-to-validate-certificate/4487>\
**Category:** Ignition\
**Created:** [May 17, 2012, 11:34am UTC](https://forum.inductiveautomation.com/t/java-error-failed-to-validate-certificate/4487 "2012-05-17T11:34:06Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![mtedford](https://avatars.discourse-cdn.com/v4/letter/m/ea666f/32.png) [@mtedford](https://forum.inductiveautomation.com/u/mtedford)\
**Post date:** [May 17, 2012, 11:34am UTC](https://forum.inductiveautomation.com/t/java-error-failed-to-validate-certificate/4487/1 "2012-05-17T11:34:06Z")

</div>

Failed to validate certificate. The application will not be executed.  
java.security.cert.CertificateException: java.security.cert.CertPathValidatorException: java.security.InvalidKeyException: Wrong key usage

I received this error on a few of my machines after upgrading to 7.4.2 yesterday. Some are running java 6.18 up through 7.04. The only fix seems to be uninstalling java and reinstalling. I tried deleting the cache and the stored certificates but it did not work.

Has any one seen this before or know of a proper fix?

---

<div class="post-metadata">

**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\
**Post date:** [May 22, 2012, 8:46pm UTC](https://forum.inductiveautomation.com/t/java-error-failed-to-validate-certificate/4487/2 "2012-05-22T20:46:01Z")

</div>

Well, we updated the cert for java web start on 7.4, but only a very few customers are seeing this. Not sure what’s causing it. Which cache did you delete?

---

<div class="post-metadata">

**Author:** ![Cas](https://avatars.discourse-cdn.com/v4/letter/c/77aa72/32.png) [@Cas](https://forum.inductiveautomation.com/u/Cas)\
**Post date:** [June 6, 2012, 2:17pm UTC](https://forum.inductiveautomation.com/t/java-error-failed-to-validate-certificate/4487/3 "2012-06-06T14:17:35Z")

</div>

I have seen the same thing at some of my client computers.  
Downloading and installing the most recent version of Java seems to fix the issue.

I’m not certain, but I think it’s only happening on the machines where I set up a direct link shortcut, as described in this thread:  
[viewtopic.php?f=70&t=4919](http://www.inductiveautomation.com/forum/viewtopic.php?f=70&t=4919)

Carl, do you think that direct link shortcut could be the issue?

Cas

---

<div class="post-metadata">

**Author:** ![Travis.Cox](https://avatars.discourse-cdn.com/v4/letter/t/b9bd4f/32.png) [@Travis.Cox](https://forum.inductiveautomation.com/u/Travis.Cox)\
**Post date:** [June 6, 2012, 2:45pm UTC](https://forum.inductiveautomation.com/t/java-error-failed-to-validate-certificate/4487/4 "2012-06-06T14:45:09Z")

</div>

I doubt it has anything to do with the direct link. It is something with Java’s cache. Did you try deleting Java’s cache?

---

<div class="post-metadata">

**Author:** ![Cas](https://avatars.discourse-cdn.com/v4/letter/c/77aa72/32.png) [@Cas](https://forum.inductiveautomation.com/u/Cas)\
**Post date:** [June 6, 2012, 3:17pm UTC](https://forum.inductiveautomation.com/t/java-error-failed-to-validate-certificate/4487/5 "2012-06-06T15:17:54Z")

</div>

No, I’m not at the client’s location anymore, so the simpler thing to ask them to try was the update of Java. That worked, so I moved on to other things…

---

<div class="post-metadata">

**Author:** ![roizundak](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/roizundak/32/4430_2.png) [@roizundak](https://forum.inductiveautomation.com/u/roizundak)\
**Post date:** [November 25, 2022, 8:04am UTC](https://forum.inductiveautomation.com/t/java-error-failed-to-validate-certificate/4487/6 "2022-11-25T08:04:18Z")

</div>

Open the Java Control Panel:

1. Go to Start menu Start Configure Java
2. Go to the Advanced tab \> **Security** \> **General**.
3. Uncheck the option: " **Enable online certificate validation**".
4. Check the option: " **Enable list of trusted publishers**".
