Unable to login to ENTM.

Products

• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

Session timed out trying to login to ENTM server

This occurred after copying the java keystore with a new KeyStore containing the latest LDAP certificate updates.

 

Environment

PAMSC 14.10

Cause

SSL related error:

 
javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

SSLPoke.java  simulates the same error.

Resolution

Update: 

D:\wildfly-8.2.1.Final\bin\standalone.bat 

 Line 

 set JAVA_OPTS=%JAVA_OPTS% -Xms256m -Xmx1408m -Djavax.net.ssl.trustStore="D:\wildfly-8.2.1.Final\standalone\deployments\IdentityMinder.ear\custom\ppm\truststore\ssl.keystore  "

 with

 set JAVA_OPTS=%JAVA_OPTS% -Xms256m -Xmx1408m -Djavax.net.ssl.trustStore="D:\wildfly-8.2.1.Final\standalone\deployments\IdentityMinder.ear\custom\ppm\truststore\ssl.keystore  -Djavax.net.ssl.trustStorePassword=keysecretpass"  # keysecretpass is the password of keystore

 
 Restart ENTM and you will be able to login successfully.