Installation Note 52099: The SAS® Web Infrastructure Platform load-content stage fails in SAS® Deployment Wizard when you use a generated Secure Sockets Layer certificate
When you select HTTPS as the protocol for SAS® Web Server in the SAS Deployment Wizard, the load-content stage for the SAS Web Infrastructure Platform fails. When that happens, the following errors appear in the deployment wizard:
[DAV Restore] Java Result: 8 [echo] WebDAVRestore (9.3.004)
[echo] Current time is: 2012-09-24T15:39:43.126-0400
[echo] Restoring to "/SASContentServer/repository/default/sasdav" for user ""sasadm@saspw" from
"/install/SASHome/SASWebInfrastructurePlatform/9.4/Config/Deployment/Content"
[echo] com.sas.services.webdav.DAVException: Exception accessing https://pitlax02.unx.sas.com:8343
(sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target)
[echo] at com.sas.services.webdav.DAVResource.getBasicProperties (DAVResource.java:1300)
[echo] at com.sas.services.webdav.DAVResource.(DAVResource.java:533)
[echo] at com.sas.services.webdav.DAVResource.(DAVResource.java:393)
[echo] at com.sas.services.webdav.WebDAVRestore.doResourceSource(WebDAVRestore.java:184)
[echo] at com.sas.services.webdav.WebDAVRestore.main(WebDAVRestore.java:1204)
[echo] Return Code: 8
To resolve this issue:
- For the second maintenance release for SAS 9.4 (TS1M2) and earlier releases, import the certificate of the certification authority (CA) that signed the client certificate into the SAS private Java Runtime Environment (JRE) cacerts truststore. This truststore resides in the SASHOME\SASPrivateJavaRuntimeEnvironment\9.4\jre\lib\security directory:
Example:
keytool -importcert -file root-certificate.pem -keystore cacerts -storepass changeit -alias clientca
- For the third maintenance release for SAS 9.4 (TS1M3) and later releases, use SAS Deployment Manager to import your CA certificates into the trusted CA bundle. You must specify the location of the site-signed certificate to the SAS Deployment Manager, which then updates the SAS Private JRE for you. For more information, see “Add Your Certificates to the Trusted CA Bundle” ("Chapter 7: Installing and Configuring TLS and Certificates on UNIX)" in Encryption in SAS 9.4, Sixth Edition.
For additional information, see the following sections in "Chapter 19: MIddle-Tier Security" of the SAS® 9.4 Intelligence Platform: Middle-Tier Administration Guide, Fourth Edition:
- "Configuring SAS Web Server Manually for HTTPS"
- "Configuring SAS Web Application Server to Use HTTPS"
Operating System and Release Information
SAS System | SAS Enterprise BI Server | Microsoft Windows 95/98 | 9.4 | | | |
Microsoft Windows 2000 Advanced Server | 9.4 | | | |
Microsoft Windows 8.1 Pro | 9.4 | | | |
Microsoft Windows 8.1 Pro 32-bit | 9.4 | | | |
Microsoft Windows 8.1 Enterprise x64 | 9.4 | | | |
Microsoft Windows 8.1 Enterprise 32-bit | 9.4 | | | |
Microsoft Windows 8 Pro x64 | 9.4 | | | |
Microsoft Windows 8 Pro 32-bit | 9.4 | | | |
Microsoft Windows 8 Enterprise x64 | 9.4 | | | |
Microsoft Windows 8 Enterprise 32-bit | 9.4 | | | |
z/OS | 9.4 | | | |
Microsoft® Windows® for x64 | 9.4 | | | |
Microsoft Windows 2000 Datacenter Server | 9.4 | | | |
Microsoft Windows 2000 Server | 9.4 | | | |
Microsoft Windows 2000 Professional | 9.4 | | | |
Microsoft Windows NT Workstation | 9.4 | | | |
Microsoft Windows Server 2003 Datacenter Edition | 9.4 | | | |
Microsoft Windows Server 2003 Enterprise Edition | 9.4 | | | |
Microsoft Windows Server 2003 Standard Edition | 9.4 | | | |
Microsoft Windows Server 2003 for x64 | 9.4 | | | |
Microsoft Windows Server 2008 | 9.4 | | | |
Microsoft Windows Server 2008 R2 | 9.4 | | | |
Microsoft Windows Server 2008 for x64 | 9.4 | | | |
Microsoft Windows Server 2012 Datacenter | 9.4 | | | |
Microsoft Windows Server 2012 R2 Datacenter | 9.4 | | | |
Microsoft Windows Server 2012 R2 Std | 9.4 | | | |
Microsoft Windows Server 2012 Std | 9.4 | | | |
Microsoft Windows XP Professional | 9.4 | | | |
Windows 7 Enterprise 32 bit | 9.4 | | | |
Windows 7 Enterprise x64 | 9.4 | | | |
Windows 7 Home Premium 32 bit | 9.4 | | | |
Windows 7 Home Premium x64 | 9.4 | | | |
Windows 7 Professional 32 bit | 9.4 | | | |
Windows 7 Professional x64 | 9.4 | | | |
Windows 7 Ultimate 32 bit | 9.4 | | | |
Windows 7 Ultimate x64 | 9.4 | | | |
Windows Millennium Edition (Me) | 9.4 | | | |
Windows Vista | 9.4 | | | |
Windows Vista for x64 | 9.4 | | | |
64-bit Enabled AIX | 9.4 | | | |
64-bit Enabled Solaris | 9.4 | | | |
HP-UX IPF | 9.4 | | | |
Linux for x64 | 9.4 | | | |
Solaris for x64 | 9.4 | | | |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
Type: | Installation Note |
Priority: | |
Date Modified: | 2014-03-26 09:52:04 |
Date Created: | 2014-01-16 08:57:18 |