SOI CU4 SSL Integration between SOI and SDM: Error: "Unable to connect to Service Desk web service"

Products

• CA Service Operations Insight (SOI)

Issue/Introduction

The SSL Integration between SOI and SDM is not working after SOI 4.2 CU4 upgrade. 

Error: Unable to connect to Service Desk web service: Please check your configuration settings. 

Error in log: unable to find valid certification path to requested target

The service desk is running.

Environment

Release : SOI 4.2 CU4

Service Desk: 17.3

Cause

Previously, both keystore and truststore used to be the same. As part of the next (CU5) release, the truststore and keystore will be separate which will further enhance the security.

Resolution

Import SDM certificate on the SOI side.

 

1. \CA\SOI\jre-64\lib\security\cacerts"
2. Restart the SOI Manager.

Additional Information

Example: Import the certs to \CA\SOI\jre-64\lib\security\cacerts

 

C:\Program Files (x86)\CA\SOI\jre-64\lib\security>"C:\Program Files (x86)\CA\SOI\jre-64\bin\keytool.exe" -import -alias SDM -file hostname.domain.com crt -keystore cacerts
Enter Keystore password:
Owner: CN=######.###.######.net
Issuer: CN=######.###.######.net

 

Serial number: #######
Valid from: Tue Sep 13 19:17:58 EDT 2022 until: Wed Sep 13 19:17:58 EDT 2023
Certificate fingerprints:
         SHA1: ##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##
         SHA256: ##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##
Signature algorithm name: SHA256withRSA
Subject Public Key Algorithm: 2048-bit RSA key
Version: 3

Extensions:

#1: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
  DNSName:#####
]

#2: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 5E E4 B8 06 ## ## ## ## ##  C1 ## ## ## ## ## ## ##  0A C8  ^.. ...m...
0010: F8 85 12 C1                                        ....
]
]

Trust this certificate? [no]:  yes
The certificate was added to Keystore