2020-01-06 12:27:24.425 [ERROR] com.aveksa.afx.server.init.SubmitInitializationRequestComponent:162 - 
Unable to establish secure (SSL) connection with RSA Identity Governance and Lifecycle server.
2020-01-06 12:27:24.425 [ERROR] com.aveksa.afx.server.init.SubmitInitializationRequestComponent:171 - 
SSL certificates for RSA Identity Governance and Lifecycle server and AFX were not issued by the same 
RSA Identity Governance and Lifecycle Certificate Authority(CA). You may encounter this problem if the 
RSA Identity Governance and Lifecycle certificate store has been changed, but either the 
RSA Identity Governance and Lifecycle server OR AFX installation hasn't been updated with the respective 
keystore containing new certificate and CA entries. Please update both the 
RSA Identity Governance and Lifecycle server and AFX installations with latest respective keystore available for download in the 
RSA Identity Governance and Lifecycle application.
2020-01-06 12:27:24.426 [ERROR] com.aveksa.afx.server.init.ServerInitializationComponent:79 - 
Server initialization failed! Please correct the issue and restart AFX.

and

Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: 
PKIX path building failed: java.security.cert.CertPathBuilderException: Could not build a validated path.

java.lang.IllegalArgumentException: Could not resolve placeholder 'afx.server.activemq.password' 
in string value "${afx.server.activemq.password}"

Version 8.0.0 >>>

• In the $AFX_HOME/esb/logs/esb.AFX-INIT.log:

ERROR 2024-09-04 16:28:36,140 [[MuleRuntime].uber.06: [05-AFX-INIT].heartbeatFlow.BLOCKING @e2c8c4d] [processor: ; event: 42d59090-6afc-11ef-b468-00505601403a] org.mule.runtime.core.internal.exception.DefaultSystemExceptionStrategy:
********************************************************************************
Message               : HTTP POST on resource 'https://acm-vapp.vcloud.local:8444/aveksa/afx/heartbeat' failed: Received fatal alert: certificate_unknown.
Element               : heartbeatFlow/processors/7 @ 05-AFX-INIT:afx-init.xml:234 (Request)
Element DSL           : <http:request method="POST" doc:name="Request" doc:id="45e475c3-af71-4a7d-9660-c6fd7c38703a" config-ref="HTTPS_Request_configuration" path="${afx.config.heartbeat.request.path}" outputMimeType="text/plain" responseTimeout="${afx.config.heartbeat.response.timeout}">
<http:headers><![CDATA[
#[output application/java
---
{
        "afx.server.id" : "${afx.config.server.id}",
        "afx.server.version" : "${afx.config.server.version}"
}]
]]></http:headers>
<http:response-validator>
<http:success-status-code-validator values="200"></http:success-status-code-validator>
</http:response-validator>
</http:request>
Error type            : HTTP:CONNECTIVITY
FlowStack             : at heartbeatFlow(heartbeatFlow/processors/7 @ 05-AFX-INIT:afx-init.xml:234 (Request))

  (set debug level logging or '-Dmule.verbose.exceptions=true' for everything)
********************************************************************************

• In the $AFX_HOME/esb/logs/esb.AFX-MAIN.log:

ERROR 2024-09-04 16:28:34,329 [[MuleRuntime].uber.07: [10-AFX-MAIN].uber@org.mule.runtime.core.privileged.processor.chain.AbstractMessageProcessorChain.initialise:648 @7c76f073] [processor: PRIMARY_REQUEST/processors/5/route/2/processors/1; event: 416f22c0-6afc-11ef-b468-00505601403a] org.mule.runtime.core.internal.exception.OnErrorPropagateHandler:
********************************************************************************
Message               : HTTP POST on resource 'https://acm-vapp.vcloud.local:8444/aveksa/afx/primary' failed: Received fatal alert: certificate_unknown.
Element               : PRIMARY_REQUEST/processors/5/route/2/processors/1 @ 10-AFX-MAIN:primary-request-components.xml:126 (ACM Https Request)
Element DSL           : <http:request method="POST" doc:name="ACM Https Request" doc:id="751537dc-f9b0-4f2f-8ba1-7d4e0a5ad9f8" config-ref="HTTPS_Request_configuration" path="${afx.config.primary.request.path}">
<http:headers><![CDATA[
#[output application/java
---
{
        "afx.server.id" : "${afx.config.server.id}",
        "afx.server.version" : "${afx.config.server.version}"
}]
]]></http:headers>
</http:request>
Error type            : HTTP:CONNECTIVITY
FlowStack             : at PRIMARY_REQUEST(PRIMARY_REQUEST/processors/5/route/2/processors/1 @ 10-AFX-MAIN:primary-request-components.xml:126 (ACM Https Request))

  (set debug level logging or '-Dmule.verbose.exceptions=true' for everything)
********************************************************************************

• Generate a new root (server) certificate for each AFX server and remote agent.
• Generate a new client certificate for each AFX server and remote agent.
• Redeploy all certificates.
• Restart the RSA Identity Governance & Lifecycle application, the AFX application, and the remote agents. 

• This process is described in detail in RSA Knowledge Base Article 000038314 -- How to update the root (server) and client certificates in RSA Identity Governance & Lifecycle.