How to resolve "CORS" error in a non-SSL enabled environment

Products

• CA Service Management - Service Desk Manager
• CA Service Management - Service Desk Manager
• CA Service Catalog

Issue/Introduction

Catalog offerings are not loading in Service Point due to a "CORS" error.

Environment

Service Desk Manager 17.3 and higher

Service Catalog 17.3 and higher

Resolution

Please follow the below steps to solve the issue:

i) We will need to configure F5 load balancer for both Service Catalog & Service Point with the same IP address and different ports.

ii) Go to Service catalog->administration->configuration->service information->update hostname(F5 load balancer) & port number

iii) Navigate to Catalog Server and open web.xml from C:\Program Files\CA\Service Catalog\view\webapps\usm\WEB-INF

Update the load balancer URL of Service point under "param-value" of "cors.allowed.origins"

iv) Open server.xml under USM_HOME/view/conf and remove the entry (if you already added) "<CookieProcessor sameSiteCookies="none" />" (we need to add this only if we are enabling SSL, in this case this is not required)

v) Restart Service Catalog services

vi) Login to SDM and go to Administration->Options Manager->CA Service Catalog->update the casc_endpoint with the load balancer URL.

vii) In conventional SDM recycle services on both Primary and Secondary servers and in AA set up recycle services on BG and all App servers and finally restart the xflow service.

viii) Access the Service point URL using Chrome or Firefox and you should be able to submit the request without an issue.