topic SSL certificate renewal for sas 9.4 webserver in Administration and Deployment

SSL certificate renewal for sas 9.4 webserver

LN — Tue, 15 Mar 2016 20:43:56 GMT

In order to renew the certificate, i created the csr file and received .pem file which i replaced with the original file. Now what else do i need to do. Becuase the certificate resides on my VA server. I restarted the VA server. But now my both my VA servers are not starting. What did I miss?

The error message is:

SUCCESS (SASJob PreCode)

SUCCESS (Store Process ID)

ERRORS (Start Server)

----------------------------------------------

ERROR: Unable to register LASR server with authentication service.

ERROR: Libref ML is not assigned.

ERROR: Error in the LIBNAME statement.

Thank you for the guidance

Re: SSL certificate renewal for sas 9.4 webserver

JuanS_OCS — Sat, 17 Mar 2018 13:24:00 GMT

Hi,

Shall we understand you have SAS 9.4? Which maintenance? Do you have https/certificates only on the SAS web server or in the SAS Application server too?

Anyway, please let me provide you an answer sticking for now just to the basics: https/certificate only on the web seever.

1- when you have the new certificate, please ensure that the key is the same. If you have a certificate chain file this will need to be updated too : http://support.sas.com/documentation/cdl/en/bimtag/68217/HTML/default/viewer.htm#n0nakjyj6hlqmvn11p9p04l25j9n.htm

2- when you have the files, update them on the SAS Web Server as mentioned on the above link.

3- restart only the web browser

4- validate that it works fine and is validated trough a web browser.

5- when is valid, you will need to import the new chain in the private Java keystore , also as on the same link

6- restart your SAS middle tier services.

7- if you can validate you SAS content server from the management console it should be ready for LASR too.

Now, not all is finished. If you use or plan to use the SAS Environment Manager, there is. At least one additional step, to add the certificate chain into the SAS environment Manager private java keystore, as mentioned on: http://documentation.sas.com/?cdcId=pgmsascdc&cdcVersion=9.4_3.3&docsetId=secref&docsetTarget=n12033intelplatform00install.htm&locale=en

Remember, you will most probably need or want to update the certificate on the server level too (if windows) and in the clients' web browsers.

Post Edited in 2018-03-17 to include Greg's update for the second link. Thank you @gregraka!

Re: SSL certificate renewal for sas 9.4 webserver

LN — Wed, 16 Mar 2016 22:14:12 GMT

Hi Juan,

Thank you for the reply. The first link is not working. Could you please send it again.

Thank you

Re: SSL certificate renewal for sas 9.4 webserver

JuanS_OCS — Wed, 16 Mar 2016 22:31:50 GMT

Hi, please try again, I removed the extra ")." Characters from the link on my post.

Otherwise, there you are:

http://support.sas.com/documentation/cdl/en/bimtag/68217/HTML/default/viewer.htm#n0nakjyj6hlqmvn11p9p04l25j9n.htm

Re: SSL certificate renewal for sas 9.4 webserver

gregraka — Fri, 16 Mar 2018 19:35:07 GMT

Hi,

The second link in Juan's post, no longer works.

In November of 2016, this TLS certificates information was moved from the installation guide to another guide.

Please use the following link to locate this information:

http://documentation.sas.com/?cdcId=pgmsascdc&cdcVersion=9.4_3.3&docsetId=secref&docsetTarget=n12033intelplatform00install.htm

Regards,

--Greg Rakauskas

Sr. Technical Writer, SAS