000036634 - Image in the email notification does not display in RSA Archer with certificate errors - The remote certificate is invalid according to the validation procedure shown in Job Framework Log

Document created by RSA Customer Support Employee on Oct 1, 2018
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000036634
Applies ToRSA Product Set: Archer
RSA Product/Service Type: RSA Archer
RSA Version/Condition: 6.x
Platform: Windows
IssueImage in the notification does not display with these error messages found in the Archer.ArcherTech.JobFramework.Job.yyyymmdd.xml log and stack trace.
  • Error loading the bytes for an embedded image in the email generated for notification template 'NotificationTemplateName' with id = 'xxx'.
  • The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel
  • The remote certificate is invalid according to the validation procedure

And when access to the ImagePath URL presented in the log through the browser certificate warning message is presented in the browser.
Here is a sample error log from Archer.ArcherTech.JobFramework.Job.yyyymmdd.xml log
 




<E2ETraceEvent xmlns="http://schemas.microsoft.com/2004/06/E2ETraceEvent"> 
    <System xmlns="http://schemas.microsoft.com/2004/06/windows/eventlog/system"> 
        <EventID>0</EventID> 
    <Type>3</Type> 
    <SubType Name="Error">0</SubType> 
    <Level>2</Level> 
    <TimeCreated SystemTime="2018-08-15T03:01:19.0791284Z" /> 
    <Source Name="ArcherTech.Notifications" /> 
    <Correlation ActivityID="{828e93ba-e50f-4bc0-b1be-8b74cae62753}" /> 
    <Execution ProcessName="ArcherTech.JobFramework.Job" ProcessID="10964" ThreadID="1" /> 
    <AssemblyVersion>6.2.601.1000</AssemblyVersion> 
    <Channel /> 
    <Computer>Archer_Server</Computer> 
    </System> 
    <ApplicationData> 
    <TraceData> 
            <DataItem> 
                <TraceRecord Severity="Error" xmlns="http://schemas.microsoft.com/2004/10/E2ETraceEvent/TraceRecord"> 
                <TraceIdentifier>ArcherTech.Notifications</TraceIdentifier> 
        <Description>Error loading the bytes for an embedded image in the email generated for notification template 'NotificationTemplateName' with id = 'xxx'.</Description> 
        <AppDomain>ArcherTech.JobFramework.Job.exe</AppDomain> 
        <Exception> 
            <ExceptionType>ArcherTech.Common.Exceptions.ImageLoadingNotificationException, ArcherTech.Common, Version=6.2.601.1000, Culture=neutral, PublicKeyToken=null</ExceptionType> 
            <Message>Error loading the bytes for an embedded image in the email generated for notification template 'NotificationTemplateName' with id = 'xxx'.</Message> 
            <Source /> 
            <ContextData> 
                        <Resolution>Please verify that you have access to the location where the image is stored. For further support, please contact your system administrator.</Resolution> 
                        <ImageName>CompanyLogo.jpg</ImageName> 
                        <ImagePath>https://Archer_Server/company_files/50000/icons/CompanyLogo.jpg</ImagePath> 
            </ContextData> 
            <StackTrace /> 
                <InnerException> 
                <ExceptionType>System.Net.WebException, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionType> 
                <Message>The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.</Message> 
            <Source>System</Source> 
            <StackTrace> at System.Net.HttpWebRequest.GetResponse() 
            at ArcherTech.Notifications.ExtensionMethods.EmailMessageExtensionMethods.GetImage(SessionContext sessionContext, KeyValuePair`2 imageName, Notification notification)</StackTrace> 
            <InnerException> 
                <ExceptionType>System.Security.Authentication.AuthenticationException, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionType> 
                <Message>The remote certificate is invalid according to the validation procedure.</Message> 
                <Source>System</Source> 
                <StackTrace> at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception) 
                at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest) 
                at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult) 
                at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx) 
                at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx) 
                at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state) 
                at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result) 
                at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size) 
                at System.Net.ConnectStream.WriteHeaders(Boolean async)</StackTrace> 
            </InnerException> 
            </InnerException> 
        </Exception> 
                </TraceRecord> 
            </DataItem> 
            </TraceData> 
    </ApplicationData> 
</E2ETraceEvent>


 
CauseThis error is caused by certificate not present in the trusted store.
Resolution
  1. Navigate to the image path on the RSA Archer server(s) e.g. https://Archer_Server/company_files/50000/icons/CompanyLogo.jpg
  2. Identify the certificate used
  3. Install the certificate into a trusted store on each RSA Archer server(s).
  4. Validate and check there are no further certificate warning when browsing to the image path shown in the error log. e.g. https://Archer_Server/company_files/50000/icons/CompanyLogo.jpg

Attachments

    Outcomes