# Question about Exception in Trust root Validation - with Message 403 Forbidden **URL:** \ **Category:** Developer\ **Created:** [October 29, 2025, 10:13am UTC](https://community.mosip.io/t/question-about-exception-in-trust-root-validation-with-message-403-forbidden/2360 "2025-10-29T10:13:48Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![taeseok](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/taeseok/32/1768_2.png) [@taeseok](https://community.mosip.io/u/taeseok)\ **Post date:** [October 29, 2025, 10:13am UTC](https://community.mosip.io/t/question-about-exception-in-trust-root-validation-with-message-403-forbidden/2360/1 "2025-10-29T10:13:48Z")
I am facing an error Exception in Trust root Validation - with Message 403 Forbidden in Result state while testing sbi mosip ctk The first question is, I would like to check the detailed logs on why this error occurs, but where can I check the logs? Second, I created and signed a Device.key using the link [https://mosip.atlassian.net/wiki/spaces/MSD/pages/1022394369/Building+a+Mock+Registration+MDS+for+your+1.2.0.x+MOSIP+Setup](https://mosip.atlassian.net/wiki/spaces/MSD/pages/1022394369/Building+a+Mock+Registration+MDS+for+your+1.2.0.x+MOSIP+Setup) I currently send the JWT header with only the “alg” and “typ” fields. For L0 device authentication, is the signature header required to contain the “kid” or “x5c” fields? ---
**Author:** ![system](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/1X/f60a343830fe848c9a68e2d1cc654d0cb7fbbaf2.svg) [@system](https://community.mosip.io/u/system)\ **Post date:** [November 8, 2025, 10:13am UTC](https://community.mosip.io/t/question-about-exception-in-trust-root-validation-with-message-403-forbidden/2360/2 "2025-11-08T10:13:57Z")
This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.