Network Management

ERROR in the SolarWinds platform when trying to Export chart to XLS: The remote certificate is invalid according to the validation procedure

Error: The underlying connection was closed: could not establish trust relationship for the SSL/TLS secure channel The remote certificate is invalid according to the validation procedure.

First published date

11/7/2018 11:27 PM

Last published date

10/17/2025 4:09 PM

Overview

This article explains an issue where a customer tries to export to XLS / CSV for charts using HTTPS/443 website.
Error: 

ERROR ReportingLogger - (null)  Error during fetching url: https://ORIONWEB:443/Orion/Report.aspx?ReportID=882 using CSV type
System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

 

Product section

Network Performance Monitor

Cause

Client certificate on the browser/client side does not match the local certificate used on the server. 

Resolution

Solution 1:

  1. Open IIS by choosing ​Start > Settings > Control Panel > Administrative Tools.

  2. Double-click on 'Internet Services Manager'.

  3. Select the website relevant to the SolarWinds Platform site.

  4. Click on the website, and in the central pane double-click 'SSL Settings'.

  5. Click the radial button for 'Ignore' under 'client certificates'.

  6. Perform the iisreset command via the administrator command line.

Note: Make sure Certificate used for the website matches the 'Servername' column in the Websites table. If the website needs FQDN to resolve itself it will need to be updated to match that in the websites table in the SolarWinds Platform database.

You can also create a Self-Signed Certificate and make sure it matches the Server name column in the Website Table.

Reference: https://www.sslshopper.com/article-how-to-create-a-self-signed-certificate-in-iis-7.html


Solution 2:
1. Check the SSL certificate and make sure that the Subject and the name used in the URL is the same


Solution 3:
Add the certificate to the Trusted Root Certification Authorities.

  1. Open mmc.exe.

  2. File > Add/Remove Snap-in...

  3. Select Certificates and click Add.

  4. Select Computer account and click on Next.

  5. Select Local computer and click on Finish, then on OK.

  6. On the left side, go to Certificates > Personal > Certificates.

  7. Right-click on the certificate you are using for the web console (you can check this in IIS Manager > Sites > Bindings) and select Copy.

  8. On the left side, go to Certificates > Trusted Root Certification Authorities > Certificates.

  9. Right click on Certificates and select Paste.


Solution 4
Create a localhost binding for http and have the SolarWinds Platform use that binding

  1. Open Internet Information Systems (IIS) Manager
  2. Expand websites, select the SolarWinds Platform website, and click Bindings
  3. Click add binding, choose http, change all unassigned to ::1, and make note of the port.
  4. Open the Database manager
  5. Edit the entry for the primary server in the Websites table, setting Port to the port noted in line 3 and SSLEnabled to 0.