Limitation: DSim fails on Windows machines due to failed certificate verification

Problem

DSim may fail on Windows machines due to failed certificate verification with a warning message like this:

Error making SSL connection to license server: error:0A000086:SSL routines::certificate verify failed

Solution

1. Verify Your Certificate from the Let's Encrypt's Webpage

Open this webpage in your default internet browser to verify your certificate. You do not have to click any of the links.

https://valid-isrgrootx1.letsencrypt.org/

Then re-run your DSim simulation. If this does not work, proceed with the next solution.

2. Download and Import the Certificate from Let's Encrypt

Download the certificate, and import it with the Microsoft Management Console (MMC).

1. Download the ISRG Root X1 certificate from the Let's Encrypt webpage https://letsencrypt.org/certificates/.

a) Click on the der link to download the certificate file isrgrootx1.der.

2. Import this certificate with MMC. Follow the instructions given at https://www.thewindowsclub.com/manage-trusted-root-certificates-windows for adding certificates.

a) After the instruction "Now select Local computer and click on Finish.", click OK to close the Add or Remove Snap-ins window to get back to the main MMC window.

b) For the Certificate Import Wizard, browse to where you downloaded the certificate file isrgrootx1.der. Ensure the All Files (.) search filter is selected from the Open window.

c) Place all certificates in the Trusted Root Certification Authorities to complete the Certificate Import Wizard.

3. Verify the certificate is in your Trusted Root Certification Authorities.

a) From the MMC, right-click Trusted Root Certification Authorities and select Find Certificates.

b) Enter isrg in the Contains field and click Find Now.

c) The ISRG Root X1 certificate should be found in the Trusted Root Certification Authorities.

4. Close all MMC windows.

5. Re-run your DSim simulation.

Cause

DSim's license server uses SSL certificate verification to establish a connection between your site, and the DSim license server. There may be a problem verifying the certificates if you do not have DSim's certificate authority, Let's Encrypt, as a trusted authority in your browser certificate store. If you do not have the ISRG Root X1 certificate installed in your certificate store as a trusted root certificate authority, DSim will fail on Windows.

Products Affected

• DSim Studio
• DSim
• DSim Cloud