Architecting, installing and maintaining your SAS environment

SSL certificate renewal for sas 9.4 webserver

Accepted Solution Solved
Reply
New Contributor LN
New Contributor
Posts: 2
Accepted Solution

SSL certificate renewal for sas 9.4 webserver

Hi

 

In order to renew the certificate, i created the csr file and received .pem file which i replaced with the original file. Now what else do i need to do. Becuase the certificate resides on my VA server. I restarted the VA server. But now my both my VA servers are not starting. What did I miss?

 

The error message is:

SUCCESS (SASJob PreCode)

SUCCESS (Store Process ID)

ERRORS (Start Server)

----------------------------------------------

ERROR: Unable to register LASR server with authentication service.

ERROR: Libref ML is not assigned.

ERROR: Error in the LIBNAME statement.

 

Thank you for the guidance


Accepted Solutions
Solution
Thursday
Trusted Advisor
Posts: 1,141

Re: SSL certificate renewal for sas 9.4 webserver

[ Edited ]

Hi,

 

Shall we understand you have SAS 9.4? Which maintenance? Do you have https/certificates only on the SAS web server or in the SAS Application server too? 

 

Anyway, please let me provide you an answer sticking for now just to the basics: https/certificate only on the web seever.

 

1- when you have the new certificate, please ensure that the key is the same. If you have a certificate chain file this will need to be updated too : http://support.sas.com/documentation/cdl/en/bimtag/68217/HTML/default/viewer.htm#n0nakjyj6hlqmvn11p9...

2- when you have the files, update them on the SAS Web Server as mentioned on the above link.

3- restart only the web browser

4- validate that it works fine and is validated trough a web browser.

5- when is valid, you will need to import the new chain in the private Java keystore , also as on the same link 

6- restart your SAS middle tier services.

7- if you can validate you SAS content server from the management console it should be ready for LASR too.

 

Now, not all is finished. If you use or plan to use the SAS Environment Manager, there is. At least one additional step, to add the certificate chain into the SAS environment Manager private java keystore, as mentioned on: http://support.sas.com/documentation/cdl/en/biig/69172/HTML/default/viewer.htm#n12025intelplatform00...

 

Remember, you will most probably need or want to update the certificate on the server level too (if windows) and in the clients' web browsers.

View solution in original post


All Replies
Solution
Thursday
Trusted Advisor
Posts: 1,141

Re: SSL certificate renewal for sas 9.4 webserver

[ Edited ]

Hi,

 

Shall we understand you have SAS 9.4? Which maintenance? Do you have https/certificates only on the SAS web server or in the SAS Application server too? 

 

Anyway, please let me provide you an answer sticking for now just to the basics: https/certificate only on the web seever.

 

1- when you have the new certificate, please ensure that the key is the same. If you have a certificate chain file this will need to be updated too : http://support.sas.com/documentation/cdl/en/bimtag/68217/HTML/default/viewer.htm#n0nakjyj6hlqmvn11p9...

2- when you have the files, update them on the SAS Web Server as mentioned on the above link.

3- restart only the web browser

4- validate that it works fine and is validated trough a web browser.

5- when is valid, you will need to import the new chain in the private Java keystore , also as on the same link 

6- restart your SAS middle tier services.

7- if you can validate you SAS content server from the management console it should be ready for LASR too.

 

Now, not all is finished. If you use or plan to use the SAS Environment Manager, there is. At least one additional step, to add the certificate chain into the SAS environment Manager private java keystore, as mentioned on: http://support.sas.com/documentation/cdl/en/biig/69172/HTML/default/viewer.htm#n12025intelplatform00...

 

Remember, you will most probably need or want to update the certificate on the server level too (if windows) and in the clients' web browsers.

New Contributor LN
New Contributor
Posts: 2

Re: SSL certificate renewal for sas 9.4 webserver

Hi Juan,

Thank you for the reply. The first link is not working. Could you please send it again.

Thank you
Trusted Advisor
Posts: 1,141

Re: SSL certificate renewal for sas 9.4 webserver

Hi, please try again, I removed the extra ")." Characters from the link on my post.

Otherwise, there you are:

 

http://support.sas.com/documentation/cdl/en/bimtag/68217/HTML/default/viewer.htm#n0nakjyj6hlqmvn11p9...

 

☑ This topic is solved.

Need further help from the community? Please ask a new question.

Discussion stats
  • 3 replies
  • 1528 views
  • 0 likes
  • 2 in conversation