Itallo Brandão
Tera Guru

Hi Rose,

You are absolutely on the right track. The error Session contains no certificates - Untrusted confirms that the Java Runtime (JRE) used by the MID Server does not trust the SSL certificate issuer of your Rubrik endpoint.

To resolve this, you need to import the Rubrik Root CA (and potentially Intermediate CAs) into the MID Server's local TrustStore.

Here is the step-by-step procedure:

1. Export the Certificates

  1. Open your Rubrik URL (https://...rubrik.com) in a browser (Chrome/Edge).

  2. Click the Lock Icon in the address bar -> Connection is secure -> Certificate is valid.

  3. Go to the Details or Certification Path tab.

  4. Select the top-most certificate (The Root CA) and click Export.

  5. Save it as Base64-encoded ASCII, single certificate (usually .cer or .pem).

  6. Optional: If there is an Intermediate cert in the chain, export that one too.

2. Import into MID Server JRE The MID Server looks for trust in the cacerts file. You must use the keytool command to import your exported files there.

  1. Log in to the host machine of your MID Server.

  2. Open a Command Prompt (CMD) as Administrator.

  3. Navigate to the MID Server JRE bin directory. It is typically found here: C:\ServiceNow\MidServer\agent\jre\bin (Path varies based on your install).

  4. Run the following command (replace paths accordingly):

DOS
 
keytool -import -alias rubrik_root_ca -file "C:\Temp\rubrik_root.cer" -keystore "..\lib\security\cacerts" -storepass changeit
  • -file: The path to the certificate you downloaded in Step 1.

  • -keystore: The path to the cacerts file (usually in agent\jre\lib\security\cacerts).

  • -storepass: The default Java password is changeit.

3. Restart the MID Server This is the most important step. The MID Server only reads the TrustStore on startup. You must restart the Windows Service (or Linux daemon) for the changes to take effect.

Once restarted, try the connection test again. It should now pass.

If this response helps you achieve your requirement, please mark it as Accepted Solution.
This helps the community grow and assists others in finding valid answers faster.

Best regards,
Brandão