Network Management

Platform Connect setup failed with "Cloud connection setup failed"

Cloud connection setup failed Failed to validate API access token. Unable to connect to endpoint: https://api.na-01.cloud.solarwinds.com/v1/metadata/entities/types. Verify local network and firewall access to this URL. If connectivity is successful, then try again. The URL "api.na-01.cloud.solarwinds.com" will vary depending on the region it communicates with.

First published date

6/2/2026 5:01 PM

Last published date

7/13/2026 3:18 PM

Overview

Error from the Web Console

Core.Businesslayer.log shows the following sets of error message.

  1. 2026-06-02 02:13:14,593 [7] INFO SolarWinds.Orion.Core.BusinessLayer.CoreBusinessLayerService - (null) Starting Platform Connect flow with existing token.
    2026-06-02 02:13:14,597 [7] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.Orchestrator - (null) Step: Checking current UAMS installation status.
    2026-06-02 02:13:14,603 [7] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.Orchestrator - (null) Step: Validating API access token.
    2026-06-02 02:13:14,603 [7] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.SwokenValidator - (null) API access token validation request details - Method: GET, Endpoint: https://api.na-01.cloud.solarwinds.com/v1/metadata/entities/types, Token: lgYh*************-*************************************************qH8g, Timeout: 00:00:20
    2026-06-02 02:13:14,649 [169] WARN SolarWinds.Orion.Security.Validation.CertificateValidatorBase - (null) The remote certificate is not valid due to SslPolicyErrors:RemoteCertificateChainErrors. Target: api.na-01.cloud.solarwinds.com Chain.Status: UntrustedRoot
    Chain.Elements: CN=na-01.cloud.solarwinds.com
    CN=WE1, O=Google Trust Services, C=US
    CN=GTS Root R4, O=Google Trust Services LLC, C=US
    CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
    Certificate: [Subject]
    CN=na-01.cloud.solarwinds.com

    [Issuer]
    CN=WE1, O=Google Trust Services, C=US

    [Serial Number]
    607CC28A4C6F0108133FD85F226EB09E

    [Not Before]
    5/24/2026 7:28:02 PM

    [Not After]
    8/22/2026 8:27:54 PM

    [Thumbprint]
    6198C591DC9F74D8D4414D2CCDC7018EF6A42177

    2026-06-02 02:13:14,651 [7] WARN SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.SwokenValidator - (null) API access token validation returned non-successful status - StatusCode: 0, ResponseStatus: Error, ErrorException: An error occurred while sending the request.
    2026-06-02 02:13:14,653 [7] ERROR SolarWinds.Orion.Core.BusinessLayer.CoreBusinessLayerService - (null) Unexpected error in StartConnectWithTokenInternal.
    System.InvalidOperationException: Failed to validate API access token. Unable to connect to endpoint: https://api.na-01.cloud.solarwinds.com/v1/metadata/entities/types Please verify the network/firewall allows access to this endpoint. Error: An error occurred while sending the request.
    at SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.SwokenValidator.ValidateApiAccessToken(String token, Uri endpoint, TimeSpan timeout)
    at SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.Orchestrator.<>c.<Create>b__22_5(String token, Uri endpoint, TimeSpan timeout)
    at SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.Orchestrator.ValidateApiTokenStep(StartConnectWithTokenContext context)
    at SolarWinds.Orion.Core.BusinessLayer.CoreBusinessLayerService.ExecuteStep[T](StepResult1& result, Func2 stepAction, T& context, String& finalResult)
    at SolarWinds.Orion.Core.BusinessLayer.CoreBusinessLayerService.StartConnectWithTokenInternal(String accountId, String apiAccessToken, String swoUrl)

 

  1. 2026-06-10 11:50:26,158 [197] WARN  SolarWinds.UamsClient.RetryingUamsClientInstaller - (null)  Installation failed and will be retried in 00:00:30 (attempt 1/3)
    System.Exception: Installer execution failed. ---> System.Security.Cryptography.CryptographicException: Error in signature of UAMS Client installer: 'UnknownError'.

       at SolarWinds.UamsClient.OnlineUamsClientInstaller.RunSignatureValidation(String filePath)
       at SolarWinds.UamsClient.OnlineUamsClientInstaller.<ExecuteInstaller>d__10.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(Task task)
       at SolarWinds.UamsClient.OnlineUamsClientInstaller.<Install>d__6.MoveNext()
       --- End of inner exception stack trace ---
       at SolarWinds.UamsClient.OnlineUamsClientInstaller.<Install>d__6.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at SolarWinds.UamsClient.RetryingUamsClientInstaller.<Install>d__6.MoveNext()

Product section

Orion Platform

Cause

  • Root certificates are out of date.
  • Automatic Root Certificate Update is disabled:
    SolarWinds strongly recommends keeping Automatic Root Certificate Update enabled.
    Automatic Root Certificate Updates are disabled only in offline environments.
    Internet connectivity is required to use Platform Connect; there should be no reason to disable Automatic Root Certificate Updates.

Resolution

Option 1. Enabling Windows Automatic Root Certificates

If your server does have internet access and you want Windows to update these certificates automatically, you can verify this via the Local Group Policy Editor:
  1. Run gpedit.msc.
  2. Navigate to Computer Configuration > Administrative Templates > System > Internet Communication Management > Internet Communication Settings.
  3. Locate Turn off Automatic Root Certificates Update.
  4. Ensure the policy is set to Disabled or Not Configured (which allows automatic updates)

Option 2. Update Root Certificates manually

Run the following commands with administrative permissions:

certutil -generateSSTFromWU roots.sst
certutil -addstore -f root roots.sst 

** Note that running the command will add many more non-related certificates (approximately 500~) to the Trusted Root Certificate folder.

Perform Platform Connect configuration after ensuring the root certificates are updated

  1. Log in to the SolarWinds Platform Web Console.
  2. Navigate to Settings > All Settings > Add/Edit Platform Connector and follow the steps in the wizard.
  3. Ensure that you use an API access token.
  4. It will take a while to install the UAMS Client.

Expected result from Core.Businesslayer.log

2026-06-02 02:22:32,124 [150] INFO SolarWinds.Feature.GrpcClient.FeatureServiceClientFactory - (null) Created Feature Service gRPC client factory using SolarWinds infrastructure with custom certificate provider
2026-06-02 02:23:06,467 [105] INFO SolarWinds.Orion.Core.BusinessLayer.CoreBusinessLayerService - (null) Starting Platform Connect flow with existing token.
2026-06-02 02:23:06,796 [105] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.Orchestrator - (null) Step: Checking current UAMS installation status.
2026-06-02 02:23:06,798 [105] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.Orchestrator - (null) Step: Validating API access token.
2026-06-02 02:23:06,799 [105] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.SwokenValidator - (null) API access token validation request details - Method: GET, Endpoint: https://api.na-01.cloud.solarwinds.com/v1/metadata/entities/types, Token: YgYU******-*******************************************************Xosw, Timeout: 00:00:20
2026-06-02 02:23:07,015 [105] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.PlatformConnectDataPersistence - (null) Persisting pending API token hash 1QGSkDiD....
2026-06-02 02:23:07,516 [105] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.Orchestrator - (null) Step: Retrieving ingestion token using API access token.
2026-06-02 02:23:07,532 [105] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.PlatformConnectUtilities - (null) BizApps request to https://api.na-01.cloud.solarwinds.com/v1/tokens:
{"name":"Platform Connect - 504dede4","tags":{},"type":"ingestion"}
2026-06-02 02:23:07,718 [105] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.PlatformConnectUtilities - (null) BizApps response to https://api.na-01.cloud.solarwinds.com/v1/tokens:
{"token":"RcB7-*************************************************************GlEs"}
2026-06-02 02:23:07,760 [105] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.Orchestrator - (null) Step: Configuring access token for agent installation.
2026-06-02 02:23:07,765 [105] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.PlatformConnectDataPersistence - (null) Promoting pending API token hash 1QGSkDiD... because no stored hash is available yet.
*** Assembly SolarWinds.UamsClient, Version=2026.1.0.0, Culture=neutral, PublicKeyToken=null, .NET version v4.0.30319 ***
2026-06-02 02:23:07,777 [105] INFO SolarWinds.Orion.Core.BusinessLayer.PlatformConnect.Orchestrator - (null) Step: Triggering UAMS agent installation.
2026-06-02 02:23:07,783 [147] INFO SolarWinds.Orion.Core.BusinessLayer.CoreBusinessLayerService - (null) UAMS service not yet installed (expected during initial setup). Token will be configured after installation.
2026-06-02 02:23:07,800 [105] INFO SolarWinds.CertificateManagement.Client.CertificateManagementClient - (null) CM client is trying to setup.
2026-06-02 02:23:07,823 [105] INFO SolarWinds.CertificateManagement.Client.CertificateManagementClient - (null) Trusted certificates for validation:
Subject name: "CN=SolarWinds Root CA", Thumbprint: "DFB9F88FD38E5E773972288DEA1FDBFBED0CEEE2", Has Private Key: "False"
Subject name: "CN=SolarWinds Root CA", Thumbprint: "D77714BFC2EB5A6667A98225A6E75AF12F00536C", Has Private Key: "False"
Subject name: "CN=SolarWinds SCA", Thumbprint: "34022244BD3B3FC5A7D7481339C5631B8DF5C684", Has Private Key: "True"
Subject name: "CN=SolarWinds SCA", Thumbprint: "0A13EBC83CD94890C708C747C0D8911F53A1647B", Has Private Key: "True"

2026-06-02 02:23:07,824 [105] INFO SolarWinds.CertificateManagement.Client.CertificateManagementClient - (null) CM Service channel was created on address https://localhost:17732.
2026-06-02 02:23:07,824 [105] INFO SolarWinds.CertificateManagement.Client.CertificateManagementClient - (null) Healthcheck channel was created on address https://localhost:17732.
2026-06-02 02:23:07,872 [75] INFO SolarWinds.Orion.Core.BusinessLayer.AssemblySatelliteResolver - (null) Loaded "SolarWinds.UamsClient.Strings, Version=2026.1.0.0, Culture=neutral, PublicKeyToken=null" at "file:///C:/Program Files/SolarWinds/Orion/SolarWinds.UamsClient.Strings.DLL".
2026-06-02 02:23:09,134 [105] INFO SolarWinds.CertificateManagement.Client.CertificateManagementClient - (null) Certificate is created with Subject name: "CN=SolarWinds Core Business Layer Client", Thumbprint: "D4F8D2491F4301411627DFC821D633783B2D79E7".
2026-06-02 02:23:09,147 [105] INFO SolarWinds.Orion.Core.BusinessLayer.CoreBusinessLayerService - (null) Platform Connect with token flow completed successfully.
2026-06-02 02:23:14,375 [150] INFO SolarWinds.UamsClient.OnlineUamsClientInstaller - (null) Downloaded 'https://agent-binaries.cloud.solarwinds.com/uams/latest/uamsclient.msi' to 'C:\ProgramData\SolarWinds\OrionUamsClient\uamsclient.msi'
2026-06-02 02:23:30,652 [120] INFO SolarWinds.Common.Utility.ProcessRunner - (null) exit: 0
2026-06-02 02:23:30,654 [120] INFO SolarWinds.UamsClient.OnlineUamsClientInstaller - (null) UAMS Client normal installation with role 'CloudConnected&OrionAnomalyDetection' and endpoint 'uams.na-01.cloud.solarwinds.com' succeeded and will continue by running Reinstall mode
2026-06-02 02:23:51,726 [74] INFO SolarWinds.Common.Utility.ProcessRunner - (null) exit: 0
2026-06-02 02:23:51,727 [74] INFO SolarWinds.UamsClient.OnlineUamsClientInstaller - (null) UAMS Client successfully Reinstalled after normal installation with role 'CloudConnected&OrionAnomalyDetection' and endpoint 'uams.na-01.cloud.solarwinds.com'