Loading

Installing MuleSoft Anypoint Monitoring Agent 'ERROR x509: certificate signed by unknown authority Installing'

Fecha de publicación: Jan 10, 2026
Descripción

You are installing the MuleSoft Anypoint Monitoring Agent on an on-premise runtime, as explained in the MuleSoft Help or you are encountering an error when executing the step to set up (am/bin/setup) the agent such as "ERROR x509:  certificate signed by unknown authority" shown here:

MULE_HOME is set to /opt/mule-enterprise-standalone-4.2.2-hf1
Waiting for Anypoint Monitoring configuration...
Anypoint Monitoring configuration is ready
Checking connectivity...
logstash: dias-ingestor-router.us-east-1.prod.cloudhub.io:443...
Connect to ingest... ERROR x509: certificate signed by unknown authority
28130
To start, stop or restart monitoring as a service use the following command: ./bin/am-service start|stop|restart
Solución

When an error is received installing the Anypoint Monitoring Agent, the Agent contains a localized truststore certificate at {MULE_HOME}/am/config/certs/mule-agent-chain.crt to validate the identity of dias-ingestor-router.us-east-1.prod.cloudhub.io:443. The error occurs when messages are intercepted by a firewall which injects its own certificate into the certificate chain presented by dias-ingestor-router.us-east-1.prod.cloudhub.io.

The certificate received on the server from the back end service can be retrieved by executing the below command on a terminal. 

openssl s_client -showcerts -connect dias-ingestor-router.us-east-1.prod.cloudhub.io:443

SOLUTION

Ensure that the domain dias-ingestor-router.us-east-1.prod.cloudhub.io is allowed on the firewall and no certificate introspection is done for the traffic.

Número del artículo de conocimiento

001120913

 
Cargando
Salesforce Help | Article