System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: PartialChain

News Knowledge Base
1

How to add a trust relationship between Docker and Orchestrator?

Issue Description

If the Orchestrator is correctly configured with a valid certificate, the UiPath Robot Docker image trusts the Orchestrator by default. However, for self-signed certificates or other specific configurations where the Orchestrator server isn't trusted by default, you'll need to manually add a trust relationship.

Resolution

  1. Add the server's certificate to the Linux container's trusted certificates. You could do this by copying the certificate file into the Docker image and updating the certificate store. This might look like: 
    # Inside Dockerfile

    COPY ./my-certificate.crt /usr/local/share/ca-certificates/my-certificate.crt
    

    RUN chmod 644 /usr/local/share/ca-certificates/my-certificate.crt && update-ca-certificates

    Here, my-certificate.crt is the server's certificate.

    1. Rebuild the Docker image and run it. The new Docker container based on this image should trust your Orchestrator's server.

    Note: these steps might change slightly based on your server's configuration and the Linux distribution you're using in your Docker container.