How avoid the Security Warning for the Java applets when opening the Xsuite GUI

book

Article ID: 39755

calendar_today

Updated On:

Products

CA Privileged Access Manager - Cloakware Password Authority (PA) PAM SAFENET LUNA HSM CA Privileged Access Manager (PAM) CA Privileged Access Manager (PAM)

Issue/Introduction

Summary:

Out of the box while opening the Xsuite Web-UI various warnings are issued by the browser and the Java-Runtime environment.
This document is describing the steps how to create a new self signed certificate in the Xsuite and insert this certificate into the browser and JRE trusted key store.

 

Instructions: 

- in Xsuite GUI open Config / Security / Create Certificate

- enter CN und Alternative Subject Names = FQDN, hostname und IP of Xsuite e.g.
xsuite.mulan04dom.ca.com
192.168.1.21
xsuite
xsuite.mulan04dom.ca.com (<- make sure there is no CR at the end !!)

<Please see attached file for image>

1.png

click Create

- Download Certificate
(select the newly created default Cert )

<Please see attached file for image>

2.png

- Set Certificate
(select the newly created default Cert )

<Please see attached file for image>

3.png

-> reboot

- Sign Xsuite Applets

(await success message !!!)

<Please see attached file for image>

4.png

 

<Please see attached file for image>

5.png

- Browser Certificate Manager / Servers / Import
(select the previously downloaded Cert file)

<Please see attached file for image>

6.png

"Edit Trust" -> Trust.this certificate..

<Please see attached file for image>

7.png

- Control Panel / Java / Certificates / Secure Sites / User
(select the previously downloaded Cert file)

<Please see attached file for image>

8.png

- Fully clear the Browser and Java Cache and verify all is working as expected upon relaunching the Xsuite GUI 

Repeat the above steps for each cluster node you might have.

 

Additional Information:

Please see also the CA PAM Implementation Guide for additional details

Environment

Release:
Component: CAPAMX

Resolution

.

Attachments

1558719722960000039755_sktwi1f5rjvs16vev.png get_app
1558719721289000039755_sktwi1f5rjvs16veu.png get_app
1558719719408000039755_sktwi1f5rjvs16vet.png get_app
1558719717279000039755_sktwi1f5rjvs16ves.png get_app
1558719715617000039755_sktwi1f5rjvs16ver.png get_app
1558719713763000039755_sktwi1f5rjvs16veq.png get_app
1558719711778000039755_sktwi1f5rjvs16vep.png get_app
1558719707944000039755_sktwi1f5rjvs16veo.png get_app