Certificate error in Dante Controller when used with Dante Director

If an error ‘(certificate_unknown) PKIX path building failed: … unable to find valid certification path to requested target’ occurs in Dante Controller when logging in to Dante Director or enrolling devices, this likely indicates a missing or invalid root certificate on the PC running Dante Controller.

This can happen if:

• Operating system security patches are not up to date
• Operating system version is no longer supported by the vendor, e.g. Windows 10

In the first instance, please check that O/S updates have been applied.

If this does not resolve the issue, or if it is not possible to update the O/S, the certificate can be manually checked and the issue potentially resolved as follows, using Microsoft Management Console (MMC) on Microsoft Windows:

1. Windows → Run (or Command / Windows Key + R) type mmc then <enter> (will prompt for admin rights)
2. Select File → Add / Remove Snap Ins (Ctrl +M)
3. Select “Certificates” (Double Click or Select and click Add)
4. You will be prompted for type – select “My user account” → Ok
5. Repeat adding “Certificates” but this time with “computer account” → Local computer → Ok
6. Click Ok to close the Snap-In.. dialog
7. In the left hand pane you should see drop downs for “Certificates – Current User” and “Certificates (Local Computer)”.
8. Under each of them, navigate to “Trusted Root Certification Authorities” → Certificates and scroll down through the list and verify if “Starfield Root Certificate Authority – G2” is present in BOTH folders, neither of them or only one of them.

If missing from one folder, try copying it over and adding the CA to whichever one is missing and retrying (right-click, Copy, navigate to destination folder, More Actions → Paste)

If missing from both folders, you will need to acquire the certificate elsewhere and add it, such as by downloading it from the Starfield Repository. References can be found online for how to install certificates on your O/S.