Needed to renew a certificate on a PI Vision / PI Web API Server, so looked into https://customers.osisoft.com/s/knowledgearticle?knowledgeArticleUrl=KB01649 for details as the certificate did not show up in the dialog to select a new one.
Not the verbose logging indicates: <...id...> not shown: certificate failed basic validation policy
Not what does that mean? I have a valid chain of trust, certificate is not expired, and certificate details show no difference with the previous one. Any details available why the certificate is not shown?
Now reverting to exchanging the certificate in IIS... although that is not the recommended path. The PI Web API Admin utility does show the Cert set in IIS, and it allows to save this configuration. So that is a workaround which does not leave the PI Web API configuration stale.