IBM Support

TechNote: TLS Handshake Failure When Accessing IBM Maximo Optimizer UI Due to Missing trustDefaultCerts in Liberty

Troubleshooting


Problem

When attempting to access any IBM Maximo Optimizer application through the UI, users may encounter failures due to Liberty being unable to establish secure HTTPS connections required for authentication and API communication.
This issue occurs when Liberty is configured with a PKCS12 truststore that does not contain the complete certificate chain and is not allowed to use JVM default CAs.

Symptom

Users report that the Optimizer UI fails to load, fails authentication, or becomes inaccessible.


Liberty logs in the Optimizer API pod show TLS handshake failures similar to the following:

[ERROR ] CWPKI0823E: SSL HANDSHAKE FAILURE: A signer with SubjectDN [CN=admin.optidev.ibmmasfvt.com] 
was sent from the host [auth.<domain>:443]. The signer might need to be added to local 
trust store [/etc/optimizer/certs/truststore/truststore.p12], located in SSL configuration alias 
[defaultSSLConfig]. The extended error message from the SSL handshake exception is: 
[PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target].

During authentication or JWT validation, you may also see:

CWWKS6031E: The JSON Web Token (JWT) consumer [jwtConsumer] cannot process the token string.
CWWKS6051E: Cannot retrieve JSON Web Key (JWK) from URL 
[https://auth.<domain>/oidc/endpoint/MaximoAppSuite/jwk].
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target.

These errors prevent the Optimizer UI from completing authentication and loading correctly.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB59","label":"Sustainability Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSJ5IPE","label":"IBM Maximo Scheduler Optimization"},"ARM Category":[{"code":"a8mKe000000CaY3IAK","label":"Maximo Application Suite-\u003EMAS Applications-\u003EOptimizer"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":""}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
25 February 2026

UID

ibm17261689

Page Feedback