PAM does not start after configuring custom certificates

Products

• CA Process Automation Base

Issue/Introduction

PAM 4.4 fails with the following errors when using a custom certificate:

PAM/logs/server.log:

ERROR [stderr] (CommanderManager) javax.persistence.PersistenceException: org.hibernate.exception.JDBCConnectionException: could not extract ResultSet

ERROR [org.hibernate.engine.jdbc.spi.SqlExceptionHelper] (_autoTPRecovery) javax.resource.ResourceException: IJ000470: You are trying to use a connection factory that has been shut down: java:jboss/datasources/OptinuityDS
ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([
    ("core-service" => "management"),
    ("security-realm" => "ApplicationRealm")
]) - failure description: "WFLYCTL0211: Cannot resolve expression '${itpam.custom.web.keystorepath}'"

 

PAM/logs/c2o.log:

[com.optinuity.c2o.c2oserver.DBRecoveryStateStore] [        Timer-6] Failed to assign service states  try count: 1 (will retry)
javax.persistence.PersistenceException: org.hibernate.HibernateException: Transaction was rolled back in a different thread!

Environment

4.4 GA and later

Cause

An expired certificate exists in the PAM Keystore

Resolution

1. Remove the expired certificate from the PAM certificate: How to Remove Imported Certificates From Java Keystore

2. Implement the steps noted in the following to create and configure a new valid certificate: Configure Custom Certificates and Password Vault (Wildfly)