19.29. Symphony fails sending email: PKIX path building failed

Symptoms

Symphony displays the following error:

Unable to send emails - Communication error - sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 

Background

This error indicates a failure to verify the digital certificate for one of Trumpet's web services. This can happen if there are temporary networking issues, or if the firm has a proxy server that uses self-signed digital certificates to monitor traffic.

This can also indicate that a root certificate is missing from the Windows Trust Store on the Symphony machine.  There was an issue in 2024/2025 where Microsoft was not distributing the Amazon Root certificate (Issued by "Starfield Services Root Certificate Authority - G2").  For more information, see https://repost.aws/questions/QUV4zXzpQ6R7e5pwvKOnOxNw/acm-amazon-issued-certs-new-trusted-chain-missing-on-some-computers-starfield-services-root-g2

Solution

If you are using self-signed certificates, Symphony will read the certificates in the Windows trust store for the machine.  Make sure that your self-signed certificate is properly loaded into the Windows trust store, then restart the Symphony OCR service.

Also, check the Windows Trust Store (Start->Manage Computer Certificates, then Trusted Root Certification Authorities->Certificates).  Look for a certificate Issued By "Starfield Services Root Certificate Authority - G2". If the certificate is missing, install it.  See https://repost.aws/questions/QUV4zXzpQ6R7e5pwvKOnOxNw/acm-amazon-issued-certs-new-trusted-chain-missing-on-some-computers-starfield-services-root-g2 for more information.