ERROR

When launching an Ansys application with Shared Web Licensing (Ansys hosted entitlement), the following error may appear:

Web Licensing checkout call to Direct LaaS REST API for 1 tasks failed. Error Detail: Curl error 60 encountered on call to https://laas.ansys.com/v1/products/checkout?auto=ordered&format=signed&verbose=true: schannel: SEC_E_UNTRUSTED_ROOT (0x80090325) - The certificate chain was issued by an authority that is not trusted. Status code: -6

Software & Version

Ansys Discovery - however, any Ansys application can likely experience the same error.

*This example was taken from this version but is not necessarily limited to this version.

Description/Cause

Curl Error 60 indicates that Windows could not validate the SSL certificate chain presented by the Ansys Shared Web Licensing service.

Shared Web Licensing relies on secure HTTPS communication with Ansys licensing services. If the Windows Trusted Root Certificate Store is incomplete, outdated, or missing required root certificates, SSL certificate validation may fail.

The issue documented in this instance was caused by an outdated Windows Trusted Root Certificate Store. Because the required trusted root certificates were not current, Windows could not validate the SSL certificate chain presented by the Ansys Shared Web Licensing service, resulting in the certificate validation failure.

When certificate validation fails, Shared Web Licensing cannot establish a secure connection to Ansys licensing services and license checkout requests are rejected.

*The cause(s)/solution(s) we identified in this documented instance may not be the only cause(s)/solution(s) for this error.

Solution

Update Microsoft Trusted Root Certificates

1. Ensure all Ansys applications are closed
2. Open a Command Prompt as Administrator (right click → Run as Administrator)
3. Run the following commands to download and import the latest certificates:
   1. certutil.exe -generateSSTFromWU %temp%\roots.sst
   2. certutil.exe -addstore Root %temp%\roots.sst
4. Test the application you were experiencing issues with.
   • You may need to sign in using your Ansys Credentials again.

NOTE: If your workstation is managed by your organization's IT department through Group Policy, Intune, SCCM, corporate certificate policies, or another centralized management solution, contact your IT department and request that they update the Windows Trusted Root Certificate Store on the affected system.