WA Agent HTTP job add certificate to kesysore

book

Article ID: 208993

calendar_today

Updated On:

Products

CA Workload Automation AE - System Agent (AutoSys) CA Workload Automation Agent CA Workload Automation Agents CA Workload Automation DE - System Agent (dSeries) CA Workload Automation AE - Business Agents (AutoSys) CA Workload Automation DE - Business Agents (dSeries)

Issue/Introduction

The HTTP job may fail if the remote (server) SSL certificate is not added to agent's keystore.  

java.security.cert.CertificateException: signature verification failed - Certificate issuer: CN=Some Root CA s not in the client keystore.

 

Cause

The certificate has to be added to the keystore.

Environment

Release : 11.5, 11.5, R12

Component : CA Workload Automation System Agent

Resolution

The WA Agent can automatically add any new certificate to the default keystore cacerts in the agent install directory.  Add the following parameter to the agentparm.txt and restart the agent.

https.client.ssl.accept_new_ca=true

Additional Information

For more information on parameter and to add the certificate manually, refer to this link.