topic Re: SAS Analytics certificate renewal steps required in Administration and Deployment

SAS Analytics certificate renewal steps required

mmoorthiupm — Tue, 19 Dec 2017 10:14:05 GMT

I am getting the below error,and I got the new certificate for sas analytics server can you help me out how to place the certificate in server,request you to share the step.

HTTP Status 500 - javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed

SAS Analytics certificate renewal steps required

mmoorthiupm — Tue, 19 Dec 2017 10:14:27 GMT

Hi ,

I am getting the below error,and I got the new certificate for sas analytics server can you help me out how to place the certificate in server,request you to share the step.

HTTP Status 500 - javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed

Re: SAS Analytics certificate renewal steps required

Kurt_Bremser — Tue, 19 Dec 2017 10:14:59 GMT

I merged your posts, and moved them to the Admin&Deployment community.

Re: SAS Analytics certificate renewal steps required

JuanS_OCS — Tue, 19 Dec 2017 11:41:42 GMT

Thank you @Kurt_Bremser, good move 🙂

Hello @mmoorthiupm,

PKIX is indeed a certificate related error.

Could you describe the steps/actions you have taken, so far?

I can imagine 2 situations: you are doing a new SAS deployment/installation, or you are modifying your current SAS deployment from HTTP to HTTPS. Which one would be yours?

Thank you in advance, with additional details, we will be able to provide you better support.

Kind regards,

Juan

Re: SAS Analytics certificate renewal steps required

mmoorthiupm — Tue, 19 Dec 2017 13:32:10 GMT

I have moved .crt and .key files in to the below location this is the step i have done so far

/opt/sas/config/Lev1/Web/WebServer/ssl/

and could help me out to how to make it as live any import option is there.

Re: SAS Analytics certificate renewal steps required

JuanS_OCS — Tue, 19 Dec 2017 13:36:36 GMT

Now I understand your requirement.

You need to import the full certificate path (as far as the CA, trusted and server certificates have been renewed) into the SAS Private JRE certificate store, and then restart the SAS Middle tier.

See instructions below:

http://documentation.sas.com/?docsetId=secref&docsetTarget=n0n1y5gwevy312n13h5bm4yf6quy.htm&docsetVersion=9.4&locale=en

Re: SAS Analytics certificate renewal steps required

mmoorthiupm — Tue, 19 Dec 2017 13:40:44 GMT

And am working on exciting environment need to renew the certificate.

Re: SAS Analytics certificate renewal steps required

mmoorthiupm — Tue, 19 Dec 2017 14:09:51 GMT

Shall I go with below steps kindly suggest

To add CA root and intermediate certificates, perform these steps:

Log on to the primary middle-tier machine as the SAS Installer user.
Change the directory to where your keytool commands reside.
For example:
cd /usr/java/jdk_version/bin

Enter the following command. Refer to the table for information that you must provide.

./keytool –importcert –keystore "SAS-installation-directory
/SASPrivateJavaRuntimeEnvironment/9.4/jre/lib/security/cacerts" 
–storepass changeit –alias myhost –file path-to-keystore.jks

Re: SAS Analytics certificate renewal steps required

JuanS_OCS — Tue, 19 Dec 2017 14:14:04 GMT

Beware that starting SAS 9.4 M3 cacerts is not the main certificate store, but jscerts. Also, it is advised by SAS to use the SAS Deployment Manager starting SAS 9.4 M3 and not they keytool anymore (since the certificate store may change).

Re: SAS Analytics certificate renewal steps required

mmoorthiupm — Wed, 20 Dec 2017 07:44:54 GMT

Hi,

We are facing the below issue while importing updated certificate through SAS deployment manager in sas server ,Please find the attached issue screen and could please help me out.

Re: SAS Analytics certificate renewal steps required

mmoorthiupm — Thu, 21 Dec 2017 07:45:03 GMT

Dear All,

Thanks for your suggestions ,we have fixed the issue.

Thanks and Regards

Moorthi Selvam.

Re: SAS Analytics certificate renewal steps required

JuanS_OCS — Thu, 21 Dec 2017 10:14:42 GMT

Hello @mmoorthiupm,

could you update how you fixed the issue and mark the proper answer as solution?

This would help other SAS users with a similar question.

Thank you.

Regards,

Juan