Problem description
Backup jobs remain in a Queued state because the SQL plugin cannot enqueue jobs to the local Falcon service due to a TLS trust failure. The error in logs:
tls: failed to verify certificate: x509: certificate signed by unknown authority ("Druva, INC.").
Cause
The Druva Falcon service uses a self-signed certificate that was not present in the Windows Trusted Root Certification Authorities store. This causes TLS verification to fail.
Traceback
main_mssql_service.log
level=error ts=2025-11-07T21:10:28.7780027Z filename=commandhandler.go:284 layer=CommandHandler Command=InitJobEnqueueAtFalcon message="failed to enqueue job at falcon" Error="Post \https://localhost:8082/falcon/v1/jobs/enqueue\: tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of \"crypto/rsa: verification error\" while trying to verify candidate authority certificate \"Druva, INC.\")" stack="goroutine 97
Resolution
On the affected server, open a browser and go to: https://localhost:8082/falcon/v1/jobs/enqueue as mentioned in the logs.
Export the CA root certificate from the browser.
Click the padlock icon in the address bar and select View Certificates.
Go to the Details tab.
Click Copy to File and save the certificate as a Base-64 encoded X.509 (.CER) file.
Import the certificate into Local Computer → Trusted Root Certification Authorities.
Open Microsoft Management Console (MMC) as an administrator:
Press Win + R, type mmc, and press Enter.
Go to File > Add/Remove Snap-in.
Select Certificates and click Add.
Choose Computer Account and click Finish.
Expand Certificates in the left pane.
For root certificates: Expand Trusted Root Certificate Authorities.
For intermediate certificates: Expand Intermediate Certificate Authorities.
Right-click the appropriate folder, select All Tasks > Import.
Follow the import wizard to add the exported certificate file.
Restart the Druva Enterprise Workloads service.
Verification
Retry the backup job.