Architecting, installing and maintaining your SAS environment

SAS Analytics certificate renewal steps required

Reply
Occasional Contributor
Posts: 8

SAS Analytics certificate renewal steps required

[ Edited ]

Hi 

I am getting the below error,and I got the new certificate for sas analytics server can you help me out how to place the certificate in server,request you to share the step.

HTTP Status 500 - javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed

 

Occasional Contributor
Posts: 8

SAS Analytics certificate renewal steps required

[ Edited ]
Posted in reply to mmoorthiupm

Hi ,

I am getting the below error,and I got the new certificate for sas analytics server can you help me out how to place the certificate in server,request you to share the step.

HTTP Status 500 - javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed

 

Super User
Posts: 8,590

Re: SAS Analytics certificate renewal steps required

Posted in reply to mmoorthiupm

I merged your posts, and moved them to the Admin&Deployment community.

---------------------------------------------------------------------------------------------
Maxims of Maximally Efficient SAS Programmers
Trusted Advisor
Posts: 1,569

Re: SAS Analytics certificate renewal steps required

Posted in reply to mmoorthiupm

Thank you @KurtBremser, good move Smiley Happy

 

Hello @mmoorthiupm,

 

PKIX is indeed a certificate related error.

 

Could you describe the steps/actions you have taken, so far?

 

I can imagine 2 situations: you are doing a new SAS deployment/installation, or you are modifying your current SAS deployment from HTTP to HTTPS. Which one would be yours?

 

Thank you in advance, with additional details, we will be able to provide you better support.

 

Kind regards,

Juan

Occasional Contributor
Posts: 8

Re: SAS Analytics certificate renewal steps required

Posted in reply to JuanS_OCS

Hi 

 

I have moved .crt and .key files in to the below location this is the step i have done so far

 

/opt/sas/config/Lev1/Web/WebServer/ssl/

 

and could help me out to how to make it as live any import option is there.

  

Trusted Advisor
Posts: 1,569

Re: SAS Analytics certificate renewal steps required

Posted in reply to mmoorthiupm

Now I understand your requirement.

 

You need to import the  full certificate path (as far as the CA, trusted and server certificates have been renewed) into the SAS Private JRE certificate store, and then restart the SAS Middle tier.

 

See instructions below:

http://documentation.sas.com/?docsetId=secref&docsetTarget=n0n1y5gwevy312n13h5bm4yf6quy.htm&docsetVe...

 

Occasional Contributor
Posts: 8

Re: SAS Analytics certificate renewal steps required

Posted in reply to JuanS_OCS

Shall I go with below steps kindly suggest 

 

To add CA root and intermediate certificates, perform these steps:
  1. Log on to the primary middle-tier machine as the SAS Installer user.
  2. Change the directory to where your keytool commands reside.
    For example:
    cd /usr/java/jdk_version/bin
  3. Enter the following command. Refer to the table for information that you must provide.
    ./keytool –importcert –keystore "SAS-installation-directory
    /SASPrivateJavaRuntimeEnvironment/9.4/jre/lib/security/cacerts" 
    –storepass changeit –alias myhost –file path-to-keystore.jks
Trusted Advisor
Posts: 1,569

Re: SAS Analytics certificate renewal steps required

Posted in reply to mmoorthiupm

Beware that starting SAS 9.4 M3 cacerts is not the main certificate store, but jscerts. Also, it is advised by SAS to use the SAS Deployment Manager starting SAS 9.4 M3 and not they keytool anymore (since the certificate store may change).

Occasional Contributor
Posts: 8

Re: SAS Analytics certificate renewal steps required

[ Edited ]
Posted in reply to JuanS_OCS

Hi,

 

We are facing the below issue while importing updated certificate through SAS deployment manager in sas server ,Please find the attached issue screen and could please help me out.

Occasional Contributor
Posts: 8

Re: SAS Analytics certificate renewal steps required

Posted in reply to mmoorthiupm

Hi 

 

And am working on exciting environment need to renew the certificate. 

Occasional Contributor
Posts: 8

Re: SAS Analytics certificate renewal steps required

Posted in reply to mmoorthiupm

Dear All,

 

Thanks for your suggestions ,we have fixed the issue.

 

Thanks and Regards

Moorthi Selvam.

Trusted Advisor
Posts: 1,569

Re: SAS Analytics certificate renewal steps required

Posted in reply to mmoorthiupm

Hello @mmoorthiupm,

 

could you update how you fixed the issue and mark the proper answer as solution?

This would help other SAS users with a similar question.

 

Thank you.

 

Regards,

Juan

Ask a Question
Discussion stats
  • 11 replies
  • 233 views
  • 6 likes
  • 3 in conversation