After the 14.4 to 14.5 upgrade, problem has been found with a problem with custom java connector.

Products

• CA Identity Suite

Issue/Introduction

Post the upgrade from v14.4 to v14.5, there is a problem with custom java connector. This custom java connector is using JDBC to connect to an MS SQL database.
Following error message is seen when opening the endpoint properties in Provisioning Manager and when testing connection in Connector Xpress:

_{ERROR  - com.ca.jcs.jdbc.JDBCMetaConnector: XXX: eager JDBC connection problem org.apache.commons.dbcp.SQLNestedException: Cannot create PoolableConnectionFactory (The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target".}

Environment

Identity Manager v14.5 (Standalone)

Cause

JDBC v11.2 (mssql-jdbc-11.2.0) in Identity Manager 14.5

Resolution

In Identity Manager v14.5, JDBC driver has been upgraded to version v11.2 (mssql-jdbc-11.2.0). Microsoft SQL JDBC driver (mssql-jdbc-11.2.0) enables TLS 
encryption by default. This behavioral change has no impact on a fresh and upgraded deployment of the driver as IAM Connector Server internally handles this change by passing encrypt=false;trustServerCertificate=true in the JDBC connection URL for non-TLS communication.

However, in case of an endpoint, this change requires that you manually add encrypt=false;trustServerCertificate=true for non-SSL in the JDBC URL connection information for a newly acquired or an already acquired Microsoft SQL endpoint in the Identity Manager User Console.

Additional Information

Refer to the 14.5 release note that describes this enhancement.
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-5/Release-Notes/release-features-and-enhancement/identity-manager-14-5.html#concept.dita_d3303fde-e786-4fd4-b0b6-e3a28fd60a82_JDBC_IMS


Please refer to documentation available at below location that describes how to design the connection string or url
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-management-and-governance-connectors/1-0/connectors/microsoft-connectors/microsoft-sql-server/how-to-connect-to-sql-server.html

(under section "Design the URL")