Certificate Verify Error [rc=60] During Global User Password Modification - Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

After enabling "Use External Password Policies" on the Provisioning Server and configuring the Inbound Notification URL to use HTTPS, modifications to Global Users via the Provisioning Manager may fail. When attempting to save changes, the following error appears:

• :ETA_E_0007<MGU>, Global User 'TestUser' modification failed: PMC_VALIDATE_PASSWORD: Rc: 3. FAILED... [rc=60] error setting certificate verify locations: CAfile: Not assigned CApath: none

Environment

Identity Manager 14.5

Cause

This error occurs because the Provisioning Server is unable to verify the SSL certificate presented by the Identity Manager server during the password quality check. The Provisioning Server requires a configured Trusted CA Bundle to establish a secure connection to the Identity Manager server.

Resolution

To resolve this issue, configure the Provisioning Manager to point to your Trusted Certificate Authority.

1. Open the Provisioning Manager.
2. Navigate to SYSTEM > Domain Configuration > Identity Manager Server.
3. Locate the Trusted CA Bundle parameter.
4. Edit the parameter value to include the file path to your Trusted Certificate Authority bundle.
5. Restart all affected Provisioning Servers to apply the changes.

Additional Information

If you require further assistance regarding certificate installation, please ensure your CA bundle is in the format expected by the Provisioning Server.

• Note: Updating the Trusted CA Bundle requires a full restart of all impacted services to clear the cache and establish the new verification path.

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.