MSP/OWB - Certificate warning even after clicking "Save" (using proxy)

book

Article ID: 220517

calendar_today

Updated On:

Products

Clarity PPM SaaS Clarity PPM On Premise

Issue/Introduction

Upon exporting a project to Open Workbench (OWB) or Microsoft Project (MSP / MS Project) connector, you get a certificate prompt: 'Unknown certificate: proceed?'. This still happens even after clicking Save to the certificate. Saving only appears to work for a short period of time.

Cause

Due to a proxy in the environment which is transforming the certificate

Environment

Release : All

Component : CLARITY MICROSOFT PROJECT (MSP) or OPEN WORKBENCH (OWB)

Resolution

  1. Log in to the Clarity environment from the browser.
  2. Download all certificates from the browser and copy into the Schedule connect security folder found in path: C:\Program Files (x86)\CA\PPM\CA PPM Schedule Connect\jre\lib\security. See steps below:
    1. Click on the lock icon next to the URL
    2. Click on "Certificate (Valid)" from the drop down
    3. Click on the Details tab, then "Copy to File"
    4. Click Next
    5. Click Next again. When it asks for a file location, click Browse to select path: C:\Program Files (x86)\CA\PPM\CA PPM Schedule Connect\jre\lib\security.
      • (If you are missing access, temporarily save it to your desktop, then you can copy to the correct folder later)
      • In this example, the file name given is root1.cer
    6. Click Next and then Finish
    7. Repeat the above steps for all levels of certificates (this may be a total of 3 or 4). To do this, double click on the Certification Path tab and then double click on the next level certificate
    8. A new popup window appears – follow the steps above to export this certificate from this popup window.

     3. From the command prompt, navigate to: C:\Program Files (x86)\CA\PPM\CA PPM Schedule Connect\jre\bin

     4. Import each certificate using the full path of each certificate. Example command for root1.cer:

keytool -importcert -file C:\PROGRA~2\CA\PPM\CAPPMS~1\jre\lib\security\root1.cer –alias root1 –keystore C:\PROGRA~2\CA\PPM\CAPPMS~1\jre\lib\security\cacerts

     

      5. Enter Password = changeit

      6. Type Yes to Trust the certificate and hit enter

Notes:

  • The above steps are one time steps required. For all other workstations, the cacerts file can be copied and pasted into the same directory: C:\Program Files (x86)\CA\PPM\CA PPM Schedule Connect\jre\lib\security
  • The steps above would need to be repeated for any certificate that expires and is renewed
  • The steps above are for MSP 32 bit level or OWB. For MSP 64 bit, the folders are found in C:\Program Files\CA\PPM\CA PPM Schedule Connect\jre, the commands would  need to be updated to reflect that.

Additional Information

If the above doesn't help, see also: