New Node Manager does not come online with the following message "Unable to use certificate to contact the server at Node"

New Node Manager does not come online with the following message "Unable to use certificate to contact the server at Node"

When adding a new Node Manager to your Spotfire environment, the initial trust of the Node Manager is successful but after a few minutes, it shows it is offline. On the Node Manager machine, look at the nm.log file. You may see the following:

INFO 2017-11-03T21:35:41,224-0500 [] nodemanager.trust.DelayUntilAuthorizedGate: Unable to use certificate to contact the server at Node [serverId=00000000-0000-0000-0000-000000000000, serverName=tss1.tibco.com, port=9443, online=true, siteID=00000000-0000-0000-0000-000000000000] on port 9443: I/O error on POST request for "https://tss1.tibco.com:9443/spotfire/nodemanager/messages": sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date; nested exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date

  This indicates that the date / time on the Node Manager machine is different than the TIBCO Spotfire Server machine. Adjust the time and restart the services. For Windows machines, the machine times can be kept synchronized by enabling the Windows Time service (w32time) on all servers. Windows Time Service:

• https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/windows-time-service/windows-time-service