Thanks for email.   Finally I am able to login to https://sastest01.xxxxx.xx/SASLogon/login.  its asking the userid and password then it showing below screen: -   You have signed in. For increased security, sign out and close your web browser when you finish accessing services that require authentication.   But when I use below login with https://sastest01.xxxxx.xx/SASVisualAnalyticsHub/index.jsp .....its again throwing below error:  his site can’t be reached sastest01.xxxx.xx refused to connect.   I have made all the changes as per below document.   http://support.sas.com/documentation/cdl/en/bimtag/69826/HTML/default/viewer.htm#n0nakjyj6hlqmvn11p9p04l25j9n.htm   Please advise?   ... View more

We have installed and deployed sas va7.3 on distributed env with http security.   Now we have converted into https as per sas process but still we are able to open sas portal. Its throwing below error:   URL https://sastest01.xxxx.xx/SASVisualAnalyticsHub   This site can’t be reached sastest01.xxxxxx.xxx refused to connect.   When we trying to open link without SASVisualAnalyticsHub, its showing the welcome page in blue color   https://sastest01.xxxx.xx/   also see that This page is secure (valid HTTPS). in green color.   Please advise. ... View more

Hi , When I validate the certificate its throwing below error:   [sas@sastest01 bin]$ /opt/sas/sashome/SASPrivateJavaRuntimeEnvironment/9.4/jre/bin/keytool -list -keystore /opt/sas/sashome/SASSecurityCertificateFramework/1.1/cacerts/trustedcerts.jks Enter keystore password: keytool error: java.io.IOException: Keystore was tampered with, or password was incorrect ... View more

Thanks ....   I have received two files from IT dep both have same format as per your last email.   one file has below format -----BEGIN CERTIFICATE-----   XXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXX -----END CERTIFICATE-----   and other file have same format at the bottom of the file and addtional details like  Certificate: Data: Version: 3 (0x2) Serial Number: 0 (0x0) Signature Algorithm: xxxxxxxxxxxxxxxxxxxxxxx Issuer: C=xx, O=xxxxxx, CN=xxxxx Certificate Authority Validity Not Before: Oct 1 00:00:00 2015 GMT Not After : Oct 1 00:00:00 2035 GMT Subject: C=xx, O=xxxxx, CN=xxxxx Certificate Authority Subject Public Key Info: Public Key Algorithm: rsaEncryption ... Signature Algorithm: xxxxxxxxxxxxxxxxx   -----BEGIN CERTIFICATE-----   XXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXX -----END CERTIFICATE-----   Please advise which file I need to pick in first step and how I can put the certificate on the SAS Web Server? ... View more

Thanks....   We have received only one root certificate file from IT team thats is in .pem format and other one like below :  -----BEGIN CERTIFICATE-----   XXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXX -----END CERTIFICATE----- All above file I have imported via sas depmoment wizard.   You mentioned "last one, your certificate of this machine." Could you please confirm file name called or where we get this file?   Pl explian in details as I am very new to this kind of work. ... View more

Thanks for reply.   I have missed the below step. Did you included all the certificates (chain) in all your SASPrivateJRE, on the correct order (Root - CA - certificate), in all your SAS nodes? If not, you should. You can easily do it with the SAS Deployment Mnager Just want to understand how many files genertally we need to import via deployment wizard .   In our case we have 3 files. 1) key file generted by below command       genrsa -out sastest01.s.xxxxxx.xx.key 2048 2) 2 files received from IT dept for site-signed   One is in .pem format and other have plain file like below : -----BEGIN CERTIFICATE----- xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -----END CERTIFICATE-----   I have loaded first file (.pem format ) that we received from IT team after convert into via below command openssl x509 -in /opt/sas/key/Certificate_Authority.pem -outform PEM -out /opt/sas/key/Certificate_Authority1.pem   and another loaded intermediated file receieved from IT team as defined above.   But when I going to load .key file (private key) its throwing error like  Singed overrun: bytes 920 verify the file contain certificates in proper encoding.   Could you please advise weather I am going into right direction and how we can fix above error.     ... View more

Thanks...   I alredy tried this command earlier....not pinging host and port no.     ... View more

Thanks for quick reply.   Is there any way to check whether port is close at client level? ... View more

Thanks....   I can ping host and port from metadata server but its not pinging from client machine.   On client when I ping only ip with port its get resolved.   Not understand is there any fireworks at the top of the server becase when i exceute iptables -l at the server level then nothing comes out.   Please advise?   ... View more

All services are runing fine and there is no firewall blocking at the server level. if there is any issue with client firewall then we also facing same issue with prod but this not the case. for prod env ....we able to ping port and host from client.    SAS servers status: SAS Web Infrastructure Data Server is UP SAS Metadata Server 1 is UP SAS Object Spawner 1 is UP SAS DIP Job Runner 1 is UP SAS Information Retrieval Studio Server is UP SAS JMS Broker is UP SAS Cache Locator Service ins_41415 is UP SAS Web Server is UP SAS Web App Server SASServer1_1 is UP SAS Environment Manager is UP SAS Environment Manager Agent is UP ... View more

We have find out root cause of this issue. We are not able to ping hostname and port from client machine any of the below option. telnet <hostname> 8561 telnet <IPv6 address> 8561 telnet <IPv4 address> 8561 But we are able to ping prod host and port from same machine.   Please advise? ... View more

test IP also return : 193.XXXXXXXXXXX same as prod.   In test we dont have ip start with 10.XXXXXX ... View more