AWS GameLift Cannot Install Certificate in the Server, API call failing!

Hello Indie,

The error message you're encountering indicates an issue with SSL certificate validation when your GameLift server is making an HTTPS request. Specifically, it seems to be complaining about the server not being able to verify the SSL certificate from the remote server because it doesn't trust the certificate's issuer (CA - Certificate Authority).

To resolve this issue, you can follow these steps:

1. Install the Root CA Certificate:

   You mentioned that you tried installing a certificate with certutil, but it failed due to permission issues. To install a certificate, you typically need administrative privileges. You can try running the command with elevated privileges using runas or by opening a Command Prompt as an administrator.

   For example, open a Command Prompt as an administrator and run:

   runas /user:Administrator "certutil -addstore CA C:\game\PATH\Certificates###.####.crt"

   Replace Administrator with the appropriate administrator username.

2. Restart the GameLift Server:

   After installing the certificate, restart your GameLift server to ensure that it picks up the changes.

3. Check Your GameLift Server Configuration:

   Ensure that your GameLift server configuration is set to use the correct certificate or CA bundle for SSL verification. Double-check that you've specified the path to the CA certificate or certificate bundle in your server configuration.

4. Verify the Certificate Chain:

   Ensure that the certificate you've installed is part of the correct certificate chain and is trusted by the server you are connecting to. If you have intermediate certificates, make sure they are installed as well.

5. Verify the Certificate Configuration in AWS:

   If your GameLift server is connecting to an AWS service, ensure that the SSL certificate and configuration on the AWS side are correctly set up. Make sure you are using the correct endpoint and that the SSL certificate for that endpoint is valid.

6. Check Time and Date Settings:

   Ensure that the system time and date settings on your GameLift server are accurate. SSL certificate validation depends on the system's clock being correctly set.

7. Contact AWS Support:

   If you are still facing issues after trying the above steps, consider reaching out to AWS Support for assistance. They can help you diagnose and resolve SSL certificate-related issues specific to GameLift and your AWS environment.

By following these steps, you should be able to resolve the SSL certificate validation issue on your GameLift server and allow it to make secure HTTPS requests without encountering certificate-related errors.

Please give a thumbs up if my suggestion helps