BookmarkSubscribeRSS Feed
☑ This topic is solved. Need further help from the community? Please sign in and ask a new question.
veeraraghavulu
Calcite | Level 5

I was renewed SSLs in 9.4 M7 release. All the urls working as expected with updated expiry date on web browser except SAS environment Manager url https://hostname:7443/.

was replaced certificate and key files in SASEnvironmentManager/server-5.8.0.EE/conf path and was taken backup the Logs folder.
Could you help on fix the issue please?

1 ACCEPTED SOLUTION

Accepted Solutions
gwootton
SAS Super FREQ
You can take a look at the Environment Manager server log for more details on what is failing and how. This message is returned when Environment Manager is unable to call other SAS web applications to confirm the authenticated user is a member of the groups necessary for access to Environment Manager, or that the user is not a member of one of those groups.
If your new certificates have been issued by a new Root CA or Issuing CA, note that those certificates must also be added to the SAS trust store.

Manage Certificates in the Trusted CA Bundle Using the SAS Deployment Manager
https://go.documentation.sas.com/doc/en/pgmsascdc/9.4_3.5/secref/n0n1y5gwevy312n13h5bm4yf6quy.htm
--
Greg Wootton | Principal Systems Technical Support Engineer

View solution in original post

5 REPLIES 5
gwootton
SAS Super FREQ

SAS Environment Manager reads the certificate and key from a keystore file, so you need to update it there.

 

Generate the SAS Environment Manager Keystore with a Site-Signed Certificate

https://go.documentation.sas.com/doc/en/bicdc/9.4/bimtag/p1fpnnm9hxkhlzn1x5tkqs1caeg5.htm#p10kf0lwcz...

--
Greg Wootton | Principal Systems Technical Support Engineer
veeraraghavulu
Calcite | Level 5
Hi gwootton,

we already had SAS Environment Manager with server and agent version 5.8.0-EE.

previously my url was working as expected but after renew the SSL certificates(self signed certificates), all web urls working as expected except https://hostname:7443 url.

We had replaced the certificate and key files in server-5.8.0-EE/conf path but the valid date was not changed in web browser in for this url only.

Help me on this please.
gwootton
SAS Super FREQ
Replacing the certificate and key files in the path server-5.8.0-EE/conf path will not cause Environment Manager to use them. You need to use the openssl and keytool commands to create a new hyperic.keystore file with the new certificate and key.
The syntax for those commands can be found in the linked documentation.
--
Greg Wootton | Principal Systems Technical Support Engineer
veeraraghavulu
Calcite | Level 5

HI Gwootton,

Thanks for your great help.

Now the from the web browser, can able to see the updated validity but zthe url giving below popup.

veeraraghavulu_0-1708684032585.png


For your information, didn't deploy the hyperic.keystore file through deployment manager yet. due to remaining all the urls working as expected.

Could you please help on this?



 

gwootton
SAS Super FREQ
You can take a look at the Environment Manager server log for more details on what is failing and how. This message is returned when Environment Manager is unable to call other SAS web applications to confirm the authenticated user is a member of the groups necessary for access to Environment Manager, or that the user is not a member of one of those groups.
If your new certificates have been issued by a new Root CA or Issuing CA, note that those certificates must also be added to the SAS trust store.

Manage Certificates in the Trusted CA Bundle Using the SAS Deployment Manager
https://go.documentation.sas.com/doc/en/pgmsascdc/9.4_3.5/secref/n0n1y5gwevy312n13h5bm4yf6quy.htm
--
Greg Wootton | Principal Systems Technical Support Engineer

suga badge.PNGThe SAS Users Group for Administrators (SUGA) is open to all SAS administrators and architects who install, update, manage or maintain a SAS deployment. 

Join SUGA 

Get Started with SAS Information Catalog in SAS Viya

SAS technical trainer Erin Winters shows you how to explore assets, create new data discovery agents, schedule data discovery agents, and much more.

Find more tutorials on the SAS Users YouTube channel.

Discussion stats
  • 5 replies
  • 362 views
  • 1 like
  • 2 in conversation