# "Can not fetch update image" error

**URL:** <https://hub.mender.io/t/can-not-fetch-update-image-error/687>\
**Category:** General Discussions\
**Created:** [June 9, 2019, 4:56am UTC](https://hub.mender.io/t/can-not-fetch-update-image-error/687 "2019-06-09T04:56:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![zacwbond](https://avatars.discourse-cdn.com/v4/letter/z/46a35a/32.png) [@zacwbond](https://hub.mender.io/u/zacwbond)\
**Post date:** [June 9, 2019, 4:56am UTC](https://hub.mender.io/t/can-not-fetch-update-image-error/687/1 "2019-06-09T04:56:57Z")

</div>

Recently I created a Mender server and added a device to it. The device is communicating with the server perfectly: I was able to authorize it, view its inventory, etc.

However, I can’t deploy to it. I always get this in the error log:

2019-06-09 04:35:36 +0000 UTC error: Can not fetch update image: Get [https://admin.zbapp.com:9000/mender-artifact-storage/b12174c5-7f8b-45e5-a1d0-d286172a6674?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=mender-deployments%2F20190609%2Fus-east-1%2Fs3%2Faws4\_request&X-Amz-Date=20190609T043535Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=host&response-content-type=application%2Fvnd.mender-artifact&X-Amz-Signature=f5d4c15b92565f86eb014307bf71721337bea53417d88408c45a5f1b08e6ac4c:](https://admin.zbapp.com:9000/mender-artifact-storage/b12174c5-7f8b-45e5-a1d0-d286172a6674?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=mender-deployments%2F20190609%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20190609T043535Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=host&response-content-type=application%2Fvnd.mender-artifact&X-Amz-Signature=f5d4c15b92565f86eb014307bf71721337bea53417d88408c45a5f1b08e6ac4c:) x509: certificate signed by unknown authority (possibly because of “x509: ECDSA verification failure” while trying to verify candidate authority certificate “[admin.zbapp.com](http://admin.zbapp.com)”)

Clearly it’s some kind of security error. But why is my device able to otherwise communicate perfectly with the server, yet when it tries to obtain an artifact, it fails? Is the connection to get the artifact somehow different than all the other connections?

I have a certificate installed on the device. The mender.conf has the entries:  
“ServerURL”: “[https://admin.zbapp.com:9010/](https://admin.zbapp.com:9010/)”  
“ServerCertificate”: “/opt/gateway/scripts/mender.crt”,

Was I supposed to have created an additional certificate for the artifact connections and specified that somewhere in mender.conf?

Thanks,  
Zac

---

<div class="post-metadata">

**Author:** ![zacwbond](https://avatars.discourse-cdn.com/v4/letter/z/46a35a/32.png) [@zacwbond](https://hub.mender.io/u/zacwbond)\
**Post date:** [June 9, 2019, 5:19am UTC](https://hub.mender.io/t/can-not-fetch-update-image-error/687/2 "2019-06-09T05:19:21Z")

</div>

So, I figured it out. I mistakenly copied (and referenced inside mender.conf) the cert.crt from keys-generated/api-gateway/cert.crt, which has only the API cert, instead of the file keys-generated/certs/server.crt, which has both certs for the AP gateway and the storage proxy.

Since I am using the same machine for both, the discrepancy didn’t occur to me until I went back and reviewed the key generation instructions.

Hope this helps someone in the future who runs into the same problem,

-Zac

---

<div class="post-metadata">

**Author:** ![mirzak](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/mirzak/32/2056_2.png) [@mirzak](https://hub.mender.io/u/mirzak)\
**Post date:** [June 9, 2019, 2:57pm UTC](https://hub.mender.io/t/can-not-fetch-update-image-error/687/3 "2019-06-09T14:57:24Z")

</div>

Thanks for reporting back