# Endpoint Central - Jira integration: Invalid SSL Certificate

## Problem

While setting up Endpoint Central-Jira integration, one might encounter this problem when trying to configure Endpoint Central server in Jira console.

## Causes

One of the following could be the reason you are unable to set up Endpoint Central:

- Using a self-signed certificate while Endpoint Central is running in secured mode (HTTPS)
- Using an invalid or expired SSL certificate of Endpoint Central
- Specific Endpoint Central host name for which the certificate is purchased might not be provided

## Resolution

You are required to identify the reason you cannot proceed with the integration and follow the relevant resolution from the list given below:

1. For obtaining a valid certificate and uploading it to Endpoint Central server, follow the steps on [using third-party SSL certificate for secured communication](https://www.manageengine.com/products/desktop-central/import-third-party-ssl-certificate.html).

2. The host name for which a certificate has been purchased should be specified accurately. For example, you might have purchased a certificate for the host name manageengine.com but if you provide the IP address, the results might not converge.

3. If you are using a self-signed certificate, it is recommended to use a valid CA signed certificate. If it is not possible, follow the below mentioned steps to proceed with the self-signed certificate.

   - **For Windows**, download the [zip file](https://downloads.zohocorp.com/dnd/Desktop_Central/Y6j27uoEM297ccm/windowscertgeneration.zip) and extract it to `atlassian\jira\`. The default Jira server will be installed in `C:\Program Files\Atlassian\JIRA`.  
     **For Linux**, download the [zip file](https://downloads.zohocorp.com/dnd/Desktop_Central/F3bfieL5u1BYVCa/lincertgeneration.zip) and extract it to `atlassian\jira\`. The default Jira server will be installed in `\opt\atlassian\jira\`.

   - **For Windows**, open command prompt as administrator and run the batch file with the following format:
     ```
     C:\Program Files\Atlassian\JIRA>gencert.bat dcservername:dcportnumber
     ```
     **For Linux**, connect to the terminal as root user. Navigate to `atlassian\jira\` and run the shell script with the following format:
     ```
     \opt\atlassian\jira>gencert.sh dcservername:dcportnumber
     ```

   - On running the command, you will receive an exception PKIX and then it will ask you to enter a value. Provide value 1 which will generate a file named `jssecacerts` under `atlassian\jira\`.

   - Copy the `jssecacerts` file under `atlassian\jira\jre\lib\security` (Jira installation directory) folder and then restart the Jira application.

Once you restart the Jira server, you can proceed with the integration.