SAS Content server validation error (PKIX,cacerts)

[Lukas852]

Hi,

i have installed SAS 9.4. (Metadata, Compute, Midtier, VA servers)

I'm doing the post-installation steps for Midtier and i encountered validation problem for SAS Content Server.

I've been searching for an answer earlier, and apparently there is wrong cacerts file in SASHome/SASPrivateJavaRuntimeEnvironment/9.4/jre/lib/security.

Some suggested i get our ssl certificate (or download it via browser from our web app site) and add it to current cacerts in jre.

Using this command keytool -trustcacerts -keystore "%JAVA_HOME%jre\lib\security\cacerts" -storepass changeit -importcert -alias <alias_name> -file <path_to_crt_file>

I did that (on the midtier server, which is the blued-out server in the picture error message), restarted the servers, but iam still getting the same error.

How can i fix this problem, please?

Regards,

Lukas

[alexal · Accepted solution]

@Lukas852 ,

You shouldn't use keytool with any SAS Trusted CA Bundles. Please import the certificate using SAS Deployment Manager -> Manage Trusted CA Bundle -> (33) Add Certificate to Trusted CA Bundle. 

[Lukas852]

Thanks, for a hint.

I managed to solve this - by using Deployment Manager on metadata server as well and adding the certificate.

Before i only added certificate on midtier server, which wasn't enough.

[alexal]

@Lukas852 ,

You are welcome. I'm glad that the problem has been resolved.