Could not establish trust relationship for the SSL/TLS secure channel

[evanjrowley]

Summary

Cannot use Get-Accounts.ps1 (+ workarounds) with a the PVWA self-signed certificate.

Steps to Reproduce

1. Have a CyberArk PVWA installation using the default self-signed certificate.
2. Try to use the Get-Accounts.ps1 script:
   .\Get-Accounts.ps1 -DisableSSLVerify -PVWAURL 'https://localhost/PasswordVault/' -Details -AccountID ‘Test User 01’

Expected Results

Information returned by the CyberArk REST API accessed by the PowerShell script.

Actual Results

An error message like this:

Invoke-RestMethod : The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
At A:\epv-api-scripts-main\Get Accounts\Get-Accounts.ps1:393 char:34

Reproducible

• Always
• Sometimes
• Non-Reproducible

Version/Tag number

CyberArk PAS Self Hosted V14.2

Environment setup

Bare-minimum CyberArk Vault & PVWA colocated setup using the out-of-the-box self-signed certificate. Windows Server 2022.

Additional Information

A very similar issue #225 was opened up in 2022. I've tried the first and second workarounds there, but it hasn't solved the problem for me.