WA Agent HTTP job add certificate to kesysore

Products

• CA Workload Automation AE - System Agent (AutoSys)
• CA Workload Automation Agent
• CA Workload Automation Agents
• CA Workload Automation DE - System Agent (dSeries)
• CA Workload Automation AE - Business Agents (AutoSys)
• CA Workload Automation DE - Business Agents (dSeries)

Issue/Introduction

The HTTP job may fail if the remote (server) SSL certificate is not added to agent's keystore.  

java.security.cert.CertificateException: signature verification failed - Certificate issuer: CN=Some Root CA s not in the client keystore.

 

Cause

The certificate has to be added to the keystore.

Environment

Release : 11.5, 11.5, R12

Component : CA Workload Automation System Agent

Resolution

The WA Agent can automatically add any new certificate to the default keystore cacerts in the agent install directory.  Add the following parameter to the agentparm.txt and restart the agent.

https.client.ssl.accept_new_ca=true

Additional Information

For more information on parameter and to add the certificate manually, refer to this link.