Forum Discussion
On-Premises data gateway - the remote certificate is invalid according to the validation procedure
Hi ChrisOnesBroken,
There are some proposals for you troubleshooting this issue.
1. Ensure that you download the latest version of Power BI Gateway from this link.
2. Make sure that you add required ports and whitelist the IP addresses described in this article in your firewall.
3. Uninstall the current gateway, restart your machine, then install gateway and check if it is successful.
Thanks,
Lydia Zhang
Lydia (@v-yuezhe-msft),
Thanks for your reply. I've ensured that I have the latest versions of Power BI Gateway. As I said in my original post, the 556KB installer didn't even install the gateway, so I had to find the 30MB 'offline' download.
The required ports and IP addresses were configured on our firewall by our networking team according to the article you reference.
I've installed and uninstalled the gateway, with reboots inbetweem several times.
- ChrisOnesBroken9 years ago
Helper I
I've found the trace log files from;
C:\Users\[USERNAME]\AppData\Local\Microsoft\On-premises data gateway\
...and the contents are as follows;
Starting trace on 14/03/2017 11:39:31 UTC
Version: 13.0.1700.1099
EnterpriseGatewayConfigurator.exe Information: 0 : Initialize MainViewModel
EnterpriseGatewayConfigurator.exe Information: 0 : GetConfiguratorStateAsync
EnterpriseGatewayConfigurator.exe Information: 0 : Configuration client returned null
EnterpriseGatewayConfigurator.exe Information: 0 : Sign In
EnterpriseGatewayConfigurator.exe Error: 0 : Exception: Microsoft.PowerBI.DataMovement.EnterpriseGatewayConfigurator.EmailDiscoveryServiceException: Network request returned unexpected error. ---> System.AggregateException: One or more errors occurred. ---> System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.TlsStream.EndWrite(IAsyncResult asyncResult)
at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult asyncResult, TransportContext& context)
at System.Net.Http.HttpClientHandler.GetRequestStreamCallback(IAsyncResult ar)
--- End of inner exception stack trace ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.PowerBI.DataMovement.EnterpriseGatewayConfigurator.ConfiguratorClientExtensions.<DiscoverEmailProperties>d__19.MoveNext()
--- End of inner exception stack trace ---
at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)
at Microsoft.PowerBI.DataMovement.EnterpriseGatewayConfigurator.WizardSignInViewModel.DiscoverCloudServiceDetails(HttpClient httpClient, String emailAddress)
--- End of inner exception stack trace ---
at Microsoft.PowerBI.DataMovement.EnterpriseGatewayConfigurator.WizardSignInViewModel.DiscoverCloudServiceDetails(HttpClient httpClient, String emailAddress)
at Microsoft.PowerBI.DataMovement.EnterpriseGatewayConfigurator.WizardSignInViewModel.DoNext(Object param)
at Microsoft.PowerBI.DataMovement.EnterpriseGatewayConfigurator.WizardViewModelBase.DoNextWorker(Object param)
at Microsoft.PowerBI.DataMovement.GatewayUXCommon.RelayCommand.<>c__DisplayClass6.<Execute>b__4()- Anonymous9 years agoNot applicable
Hi ChrisOnesBroken,
The issue is related to certificate. You can use Fiddler to capture request URL during the installation process, then check the certificate of the URL in IE, for more details, you can following the instructions in this similar blog.
Thanks,
Lydia Zhang- ChrisOnesBroken9 years ago
Helper I
I ran the On-Premises data gateway, and when I entered my email address for the PowerBI account I've been using, I got the following;
A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.
Version: 3.1 (TLS/1.0)
Random: 58 C9 20 55 4F F0 6E 6F B3 53 FD 1E E5 AA 79 8D 57 E3 EE A1 53 AC 4A 2E 7F 20 C1 C6 22 B1 DC 85
"Time": 05/04/2015 06:34:16
SessionID: empty
Extensions:
renegotiation_info 00
server_name api.powerbi.com
elliptic_curves secp256r1 [0x17], secp384r1 [0x18]
ec_point_formats uncompressed [0x0]
SessionTicket empty
Ciphers:
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
[0035] TLS_RSA_AES_256_SHA
[002F] TLS_RSA_AES_128_SHA
[C00A] TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
[C009] TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
[0038] TLS_DHE_DSS_WITH_AES_256_SHA
[0032] TLS_DHE_DSS_WITH_AES_128_SHA
[000A] SSL_RSA_WITH_3DES_EDE_SHA
[0013] SSL_DHE_DSS_WITH_3DES_EDE_SHA
[0005] SSL_RSA_WITH_RC4_128_SHA
[0004] SSL_RSA_WITH_RC4_128_MD5
Compression:
[00] NO_COMPRESSION
I've browsed to https://api.powerbi.com/ in IE, and as expected, I received the error 'There is a problem with this website's security certificate'.
I proceeded to 'trust' the certificate in IE. I clicked 'Sign in' again on the On-Premises data gateway, and was presented with subsequent error messages;
Ensure network access is functioning correctly. Firewall and proxy configurations may need to be changed.
and
Gateway service health check failed. Common issues can be found at https://go.microsoft.com/fwlink/?linkid=838272
Below is the stack trace:
Health check failed becuase it cannot finish in 2000ms.