License validation error when using Sugar 7.6 on Windows

Question

For release 7.6+, we enforce X509 server certificate validation when connecting to the license/heartbeat server (updates.sugarcrm.com). This means that whenever installing or using Sugar 7.6 and higher, you now need to ensure that you have the necessary CA certificates installed.

By default every OS comes with a store of public CA's to perform this validation. However, we have found that the cURL libraries commonly used on Windows machines are often missing the necessary CA certificates. However, you could potentially run into this issue on any system.

If your system is missing these certificates and you login to Sugar 7.6, you may see a screen that looks something like this image below.

Matt Marum · Accepted Answer

If you encounter this error (especially on Windows) then you should follow the updated Web Server configuration steps in the Sugar 7.6 Installation/Upgrade guide. These steps involve downloading a certificate bundle and updating your php.ini to set curl.cainfo to the new bundle's path. See the guide for more details.