New https Certificate For SOI UI

book

Article ID: 145559

calendar_today

Updated On:

Products

CA Service Operations Insight (SOI)

Issue/Introduction

My web https UI for SOI certificate is about to expire. What are the steps to create a new certificate?

Cause

https certificate expired for SOI UI

Environment

SOI 4.2

Resolution

Please refer below wiki page for step by step instructions to generate and import certificates into "ssa.jks" on SOI Manager and UI

 

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/it-operations-management/service-operations-insight/4-2/administrating/security-administration/support-for-common-access-card-and-smartcard-authentication-using-client-certificates/generate-certificates-and-keystore.html

 

Once the certificate is imported into ssa.jks, you may run below command to list the certificates. By default, there is 1 certificated named "tomcat" for SOI Manager.

 

keytool.exe -list -v -keystore "C:\Program Files (x86)\CA\SOI\SamUI\conf\ssa.jks"

keytool.exe -list -v -keystore "C:\Program Files (x86)\CA\SOI\tomcat\conf\ssa.jks"

 

When it prompts for password, enter "catalyst"

 

Note: Please backup original ssa.jks before importing any certificate.

 

You may run above commands to list the certificates on UI server and see if the old certificate exists