Cannot edit "SSL Trust Store Location" and "Password" when configuring "New Authentication system" in dSeries (WA DE)

Products

• CA Workload Automation DE

Issue/Introduction

User is unable edit "SSL Trust Store Location" and "SSL Trust Store Password" fields when trying to add "New Authentication system".

 

Environment

Component: Workload Automation ESP dSeries (DE)

Release : 12.x

Cause

If at any point an SSL truststore was added, the dSeries manager will hard code it in db.properties.

#Added by Manager
javax.net.ssl.trustStorePassword=XXXXXXXXXXXXX
javax.net.ssl.trustStore=/opt/CA/keystore/somestore

 

 

Resolution

• Delete all the entries under Authentication Systems.
• Remove or comment both of the "javax.net.ssl.trustStore" lines from db.properties.
• Restart dSeries service and then add an Authentication System.
  All the fields should be blank and editable for new system.

Note: Only one SSL trust store can be used. If more than one Authentication system (AD/LDAP), all the systems will have to use the same SSL trust store and associated password. The trust store can store multiple certificates for different LDAP servers. To import or add certificates, use keytool command.

Reference the section titled "Import the LDAP Certificate into the SSL TrustStore" in the ESP dSeries Workload Automation documentation for additional details.