Had renewed SSLs in 9.4m7. All the urls working as expected except sas Environment Manager Url.

[veeraraghavulu]

I was renewed SSLs in 9.4 M7 release. All the urls working as expected with updated expiry date on web browser except SAS environment Manager url https://hostname:7443/.

was replaced certificate and key files in SASEnvironmentManager/server-5.8.0.EE/conf path and was taken backup the Logs folder.
Could you help on fix the issue please?

[gwootton]

SAS Environment Manager reads the certificate and key from a keystore file, so you need to update it there.

Generate the SAS Environment Manager Keystore with a Site-Signed Certificate

https://go.documentation.sas.com/doc/en/bicdc/9.4/bimtag/p1fpnnm9hxkhlzn1x5tkqs1caeg5.htm#p10kf0lwcz...

[veeraraghavulu]

Hi gwootton,

we already had SAS Environment Manager with server and agent version 5.8.0-EE.

previously my url was working as expected but after renew the SSL certificates(self signed certificates), all web urls working as expected except https://hostname:7443 url.

We had replaced the certificate and key files in server-5.8.0-EE/conf path but the valid date was not changed in web browser in for this url only.

Help me on this please.

[gwootton]

Replacing the certificate and key files in the path server-5.8.0-EE/conf path will not cause Environment Manager to use them. You need to use the openssl and keytool commands to create a new hyperic.keystore file with the new certificate and key.
The syntax for those commands can be found in the linked documentation.

[veeraraghavulu]

HI Gwootton,

Thanks for your great help.

Now the from the web browser, can able to see the updated validity but zthe url giving below popup.

For your information, didn't deploy the hyperic.keystore file through deployment manager yet. due to remaining all the urls working as expected.

Could you please help on this?

[gwootton · Accepted solution]

You can take a look at the Environment Manager server log for more details on what is failing and how. This message is returned when Environment Manager is unable to call other SAS web applications to confirm the authenticated user is a member of the groups necessary for access to Environment Manager, or that the user is not a member of one of those groups.
If your new certificates have been issued by a new Root CA or Issuing CA, note that those certificates must also be added to the SAS trust store.

Manage Certificates in the Trusted CA Bundle Using the SAS Deployment Manager
https://go.documentation.sas.com/doc/en/pgmsascdc/9.4_3.5/secref/n0n1y5gwevy312n13h5bm4yf6quy.htm