The configuration of Administrative Authentication with an SSL enabled user directory fails on siteminder UI version 12.8.02 and above.
book
Article ID: 186534
calendar_today
Updated On:
Products
CA Single Sign On Secure Proxy Server (SiteMinder)CA Single Sign On Agents (SiteMinder)CA Single Sign On Federation (SiteMinder)CA Single Sign On SOA Security Manager (SiteMinder)SITEMINDER
Issue/Introduction
The configuration of Administrative Authentication with an SSL enabled user directory fails with the following error in admin ui:
An error occurred while updating the list of trusted CA certificates. Please ensure the trusted certificate you are using is valid. If the problem persists, check the error logs for additional details.
Have already tried import new directory Root CA certificate using command: keytool -import -trustcacerts -alias <alias> -keystore "siteminder/adminui/standalone/configuration/trustStore.jks" -file <RootCA.cer>
Also verified cert is inside trustStore.jks by using command: keytool -list -v -keystore ./trustStore.jks -storepass <password>
Environment
Release : 12.8.03
Component : SITEMINDER WAM UI
Cause
This is an identified regression defect between release versions affecting 12.8sp2 or later.
Resolution
To resolve the issue, perform the following steps: 1. Navigate to the following location: Windows: administrationUI_installation_home/bin/ UNIX: administrationUI_installation_home/bin/
2. Open the following file: Windows: standalone.conf.bat file UNIX: standalone.conf file
3. Add the following lines at the end of the file: Windows: set "JAVA_OPTS=%JAVA_OPTS% -Djavax.net.ssl.keyStorePassword=changeit" set "JAVA_OPTS=%JAVA_OPTS% -Djavax.net.ssl.trustStorePassword=changeit" set "JAVA_OPTS=%JAVA_OPTS% -Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true"