Request to add hostname to SSL certificate SAN for Metadb (Power BI connectivity issue) Message sent onApril 30, 2026 at 08:18 AM PDT From:Sharon Markus
Hosting Team, As you are aware from previous ticket entries, we are currently unable to connect to our Metadb PostgreSQL reporting database. After some research into the issue on our end, we believe the connection cannot be made from Power BI Desktop due to a SSL hostname validation failure. The server certificate presented by the database endpoint includes only the AWS RDS hostname: CN: metadb-scnl.c51bi8byxdg6.us-east-1.rds.amazonaws.com SAN: metadb-scnl.c51bi8byxdg6.us-east-1.rds.amazonaws.com However, our connection is made using the EBSCO-provided hostname: metadb-db-cornell.folio.ebsco.com Because this hostname is not included in the certificate’s Subject Alternative Name (SAN) list, Power BI rejects the connection during SSL validation. Please update or reissue the SSL certificate for the Metadb endpoint to include the following hostname in the SAN field: metadb-db-cornell.folio.ebsco.com Ideally, the certificate should include both: metadb-scnl.c51bi8byxdg6.us-east-1.rds.amazonaws.com metadb-db-cornell.folio.ebsco.com Other tools (e.g., DBeaver) can connect due to relaxed SSL settings, but Power BI enforces strict hostname validation. This change is required for secure, standards-compliant connectivity from Power BI. Please let us know when this update has been applied or if any additional information is needed. All the best, Sharon
P2 SI # 4809078 : Cornell Metadb: connection from PowerBI to Metadb still not working Status Working Case Number 6596013 DETAILS Case Subject P2 SI # 4809078 : Cornell Metadb: connection from PowerBI to Metadb still not working Case Number 6596013 Description Hosting Team, Please escalate this issue as a high priority.
Our network connections from PowerBI to the Cornell Metadb reporting database are still not working. Please see related previous case on this issue SI 4404657 | Cornell Metadb: connection via Power BI Desktop failing, which was closed without resolution. Our reporting team needs to be able to connect to the Cornell Metadb reporting database from Power BI. I am trying to make a connection from my computer with a static IP address that has already been whitelisted for access to our Metadb database for access via DBeaver and Tableau. I am able to successfully connect to Metadb from those applications. When I set up a connection using the PostgreSQL database connector in Power BI Desktop, I get the following error message: "Unable to Connect. An error happened while reading data from the provider: 'The remote certificate is invalid according to the validation procedure.'" My PowerBI connection details are: Server: metadb-db-cornell.folio.ebsco.com:5434 Database: metadb In answer to issue SI 4404657, you provided us with some generic troubleshooting information. We have tried the solutions offered in messages connected to this ticket and none of them have worked. We must get this connection working. There are other institutions on the FOLIO Project who are using Metadb with PowerBI successfully, so this should work. As a next step toward resolving this issue, please provide us with answers to the following 2 questions: Question 1 - Are you using an alternative hostname for our Postgresql Server that runs the Metadb software, one in the "rds.amazonaws.com" domain? Using the alternative hostname, instead of the one we usually use, might result in success by having the name the client is expecting (PowerBI native Pg drivers) match the one the server is transmitting, if it turns out those aren't the same when using the hostname we usually use. Question 2 - In what region does the AWS RDS Postgresql Server run? In other words, which certificate bundle should we choose to install from this list of Amazon RDS Certificate Bundles? https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html#UsingWithRDS.SSL.CertificatesDownload If the next set of answers does not get us any further, we will need to arrange a Microsoft Teams or Zoom meeting with one of your server administrators so we can troubleshoot this issue in real time.
All the best, Sharon Markus Service Issue Number SI-4809078 Institution Cornell University Library Product FOLIO Requester Sharon Markus Area of Support FSE Hosting Issue Assigned To Whitney Jordan ------- Thank you for contacting EBSCO.
Your EBSCO Customer Support Case Number and Title are: 6390448 - "SI 4404657 | Cornell Metadb: connection via Power BI Desktop failing". _________________________________________________________________
Hello Sharon,
I've found someone with a similar issue online, which they solved. Here is the issue: https://community.fabric.microsoft.com/t5/Desktop/The-remote-certificate-is-invalid-according-to-the-validation/m-p/532504#M249591
Solution: https://community.fabric.microsoft.com/t5/Desktop/The-remote-certificate-is-invalid-according-to-the-validation/m-p/532504#M249591
Cameron Viveiros FOLIO Customer Account Specialist EBSCO Information Services 978-414-0645 cameronviveiros@ebsco.com
This message and its contents are confidential. If you received this message in error, do not use or rely upon it. Instead, please inform the sender and then delete it.
--- Original Message --- Hi Cameron,
I tried the settings you mentioned and was not able to successfully connect to Metadb from PowerBI on my computer that has a static IP address that is whitelisted for use with Cornell's Metadb reporting database.
I am attaching the specific login configurations I tried as a Word document.
Any other ideas?
All the best,
Sharon
---
Cameron Viveiros Emailauto-response@ebsco.com To: s9001366 Cornell University Library : Sharon Markus The Metadb PostgreSQL endpoint does not use a self-signed or internal CA certificate. It uses the standard AWS RDS public certificate chain, which should be trusted. Tools like DBeaver and Tableau connect successfully because they automatically set SSL options and handle the AWS RDS certificate chain correctly. Power BI Desktop requires additional parameters; otherwise, it rejects the connection even with a valid certificate. Please try the following in Power BI Desktop’s PostgreSQL connector under Advanced Options: SSL Mode=require Trust Server Certificate=true This forces encrypted transport but bypasses Power BI’s strict certificate checks.
|