As part of a SAS Visual Investigator deployment, you run the distribute-httpd-certs playbook to distribute certificates and update keystores. After this action, you might encounter an error in the Elasticsearch log that is similar to the following:

To work around this issue, you must regenerate the Elasticsearch keystores for both the client and administrator:

1. Generate a truststore.


2. Back up the following files:
   • /opt/sas/viya/config/etc/elasticsearch/default/keys/searchguard/searchguard-key- admin.jks
   • /opt/sas/viya/config/etc/elasticsearch/default/keys/searchguard/searchguard-key- client.jks
   Then move these files to a location that is different from their original location.


3. ​​​​​Identify the server and port where Consul is located.


4. To regenerate the keystores with the new truststore, issue the following two crypto-management requests (each one on its own line):

5. Use the following command to stop the Elasticsearch node:
       sudo service sas-viya-svi-elasticsearch-default stop


6. Use the following command to restart the Elasticsearch node:
       sudo service sas-viya-svi-elasticsearch-default start

Operating System and Release Information