When exporting a report in the SolarWinds Platform, Error The underlying connection was closed: could not establish trust relationship for the SSL/TLS secure channel

2/8/2019 10:36 PM

5/6/2025 3:45 PM

This article describes an issue when trying to export graphs, tables reports data from the SolarWinds Web Console, the following error message appears in the ActionExecutionReport.log:

ERROR ReportingLogger - Action [Action: ID: 248, ActionType: SaveToDisk, Title: CSV - E:\RSA\REPORTS, Description: Save To Disk selected report in a specified format (CSV, PDF, or XLS), Enabled: True, Order: 1 , Context: EnviromentType: Reporting, for Account admin] execution has failed. System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

The error is also noticed in scheduled reports for the same kind of reports above especially CSV / Excel type

Orion Platform

This issue occurs when one of the following conditions are true:

• SolarWinds Web Console is using HTTPS:
  • Certificate Authority (CA) (which signed the web console certificate) is missing in the Trusted Root Certificate Authorities Store.  This is a common issue if the certificate is self-signed or signed by private certificate authority.  If the certificate is signed by a public ca, this is less likely as long as Windows operating system is up-to-date.
  • Common Name (CN) does not match the URL String.  SolarWinds stores the hostname in the [dbo].Websites table in the SolarWinds database. 
  • Certificate is expired.

To find the SSL certificate assigned to the SolarWinds web console, perform the following steps:

1. Navigate to Start > Administrative Tools > Internet Information Service (IIS) Manager.
2. Expand the Application Pool > Sites
3. Right-click SolarWinds NetPerfMon website
4. From the right-pane, select Bindings.
5. Click the type HTTPS Port 443
6. Select Edit.
7. In the Add Site Binding window, go to the SSL Certificate
8. Click Select (or View to view the Certificate).
9. Click General Tab to confirm the Issued to (Common Name) and if there are any statements or purposes listed if there are none and these messages appear: 
   • This CA Root certificate is not trusted. To enable trust, install this certificate in the Trusted Root Certification Authorities store or
   • This certificate cannot be verified up to the trusted certification authority

The CA certificate needs to be imported into the proper store, perform the following steps:

Important! Obtain the CA certificate from the certificate authority before performing these steps.

1. Navigate to Start > Search MMC.exe
2. Click File
3. Select Add/Remove Snap-in... > Certificates
4. Click Add
5. Select Computer Account 
6. Click Next
7. Select Local computer
8. Click Finish > Ok
9. From the left pane, select Certificate (Local Computer) > Trusted Root Certification Authorities
10. Right-click, select All Tasks > Import
11. Click Browse
12. Select the CA certificate file (obtained from the certificate authority)
13. Click Next
14. Select Place all certificates in the following store: Trusted Root Certification Authorities
15. Click Next > Finish
16. Go back to Internet Information Services (IIS) Manager and restart the website.

Other Resolution : 

• Common Name of the certificate MUST match the SolarWinds web console URL