NET:ERR_CERT_COMMON_NAME_INVALID error when accessing the Data Aggregator APIs or the Portal UI

Products

• CA Performance Management - Usage and Administration
• DX NetOps

Issue/Introduction

We are seeing the error "NET:ERR_CERT_COMMON_NAME_INVALID" when accessing the Data Aggregator APIs or the NetOps Portal UI

Environment

All Supported Releases

Cause

This is due to the name of the server entered in the URL bar not matching what is available in the HTTPS Certificate of the NetOps Portal.  This normally is seen when only the Fully-Qualified Name is within the HTTPS Certificate but the server is called by the shortname or IP Address and/or the name being requested not being included as a Subject Alternative name in the SSL certificate

Resolution

a) To control what the NetOps Portal calls itself as well as what data sources like the Data Aggregator and Spectrum call the NetOps Portal you can use the /opt/CA/PerformanceCenter/SsoConfig utility.  In the situation where the HTTPS certificate is set for the fully-qualified hostname but the Data Aggregator is calling the NetOps Portal by the short name:

1. Access /opt/CA/PerformanceCenter/SsoConfig

2. Choose 1. DX NetOps

3. Choose 3. Performance Center

4. Choose 1. Remote Value

5. Choose 2. Web Service Host:

6. Choose u for Update

7. Enter the hostname.fully.qualified.domain.name

8. Choose 7. Web Site Host:

9. Choose u for Update

10. Enter the hostname.fully.qualified.domain.name

11. Enter q followed by a return to exit out

12. Restart all 4 caperfcenter_* services

systemctl stop caperfcenter*

systemctl start caperfcenter_eventmanager caperfcenter_sso caperfcenter_devicemanager; sleep30; caperfcenter_console

13. After a global synchronization has been completed, reattempt the connection to the Data Aggregator API

B) Make sure the certificates include the fqdn at a minimum as a Subject Alternative name.