topic Re: ThingWorx Flow 9.3.10 - Error [FLOW-API-01] and "Unauthorized Access" after regenerating self... in ThingWorx Developers

ThingWorx Flow Error [FLOW-API-01] after regenerating self-signed certificate

GabrielAzevedo — Thu, 08 Jan 2026 20:33:27 GMT

Hi everyone,

I am running ThingWorx Flow 9.3.10 and I’m hitting a wall trying to fix an expired self-signed certificate.

The Issue: My self-signed certificate for Flow expired, so I needed to regenerate it. I followed the official guide here: CreateSelfSignedCertificate.html

I generated the new files, placed them in the SSL directory, and restarted the services. However, Flow is now failing to connect.

Symptoms:

Redirect Loop: When I try to open the ThingWorx Flow app, it automatically redirects me back to the ThingWorx Composer.
Validation Error: When I run ValidateFlowSetup in the WorkflowSubsystem, I get:
```
[FLOW-API-01] - Failed to connect to Flow: Internal Server Error
```

Log Error: The flow-exchange module logs show this error, which suggests a trust issue:

{"module":"flow-exchange","timestamp":"...","level":"error","message":"unauthorized access"}

It seems like the internal services aren't accepting the new certificate I generated. Has anyone experienced this? Is there an extra step missing in the documentation to update the internal TrustStore or Keystore?

Any advice would be appreciated.

Thanks!

Re: ThingWorx Flow 9.3.10 - Error [FLOW-API-01] and "Unauthorized Access" after regenerating self...

abandal — Fri, 09 Jan 2026 17:11:15 GMT

Hello @GabrielAzevedo,

Please provide the following information:

OS and version
ThingWorx Platform version
Port used for accessing ThingWorx Platform and Flow
Whether ThingWorx Platform is accessible via the nginx (Flow) port
Whether Flow is installed on the same machine as ThingWorx Platform
Whether Flow was working as expected before the self-signed certificate update

Please also ensure:
- The **Issued To** name on the certificate must match the hostname of the ThingWorx Flow server to avoid certificate-related errors
- `server_name` is correctly set in `<nginx_home>\conf\conf.d\vhost-flow.conf`
- `extra.crt` and `orchestration.crt` files match

Regards,

Abhi

Re: ThingWorx Flow 9.3.10 - Error [FLOW-API-01] and "Unauthorized Access" after regenerating self...

abandal — Mon, 19 Jan 2026 16:20:36 GMT

Hello @GabrielAzevedo,

I hope you are doing well!

I am following up on your post. Did you have a chance to review my previous response?

Please provide the information I requested in my previous response.

Regards,

Abhi

Re: ThingWorx Flow 9.3.10 - Error [FLOW-API-01] and "Unauthorized Access" after regenerati

GabrielAzevedo — Mon, 19 Jan 2026 16:33:37 GMT

Hi Abhi!

Sorry for the delay.

You were right, the extra.crt and orchestration.crt files didn't match. I’ve corrected that, and the issue is resolved.

Thanks a lot for your help!