Error importing ssl certifiate on the oneclick server

Products

• CA Spectrum
• CA eHealth

Issue/Introduction

To secure OneClick server on a new installed DX NetOps Spectrum 20.2.0 OneClick server we get "keytool error: java.lang.Exception: Certificate reply and certificate in keystore are identical" when trying to import the returned CRT file from our CA admin.

Environment

Release : 20.2

Component : Spectrum Core / SpectroSERVER

Cause

Incorrect value in name for generated private key for alias tomcatssl

Resolution

The value in name for generated private key for alias tomcatssl must be FQDN of the OneClick Server.

Additional action to make ssl work for the OC server was that OC server.xml also must have adapted truststoreFile.