Failure to Install Certification for Mods Due to Untrusted Signers in Spotfire
book
Article ID: KB0070042
calendar_today
Updated On:
Products
Versions
Spotfire Server
All supported versions
Description
Description: When attempting to add a certificate for Mods on the admin page, users encounter errors such as "The trust action could not be persisted on the server" and error code 404, which indicates an "invalid_certificate_path."
The following error messages are also displayed:
-------------------------------------------------------------------------------------------------------- codetrust.error.TrustExceptionController: An error occurred while processing the trust request com.spotfire.rs.security.codetrust.error.TrustException: Error verifying the certificate path at com.spotfire.server.security.codetrust.CodeTrustManager.validateCertificate(CodeTrustManager.java:1549) ~[spotfire-server.jar:?] at com.spotfire.server.security.codetrust.CodeTrustManager.addExternalCertificate(CodeTrustManager.java:1581) ~[spotfire-server.jar:?] --------------------------------------------------------------------------------------------------------
Issue/Introduction
Users encounter an error when installing a certificate for Mods, with the message "The trust action could not be persisted on the server" and error code 404, indicating an "invalid_certificate_path." Steps suggested to resolve the issue.
Environment
All supported operating systems
Resolution
To resolve this issue, follow these steps:
1. Log into Spotfire Server and open the Command Prompt.
2. Navigate to the directory: <tss server installation>/tomcat/spotfire-bin
3. Run the command: config.bat export-config -f Enter the "Tool Password" that you created when setting up the Spotfire server. This command exports the Spotfire Server configuration file (configuration.xml).
5. Run config.bat import-config -c "<RandomName>" Enter the "Tool Password" again when prompted.
6. Restart the Spotfire server to apply the changes.
7. Open Spotfire Analyst and login with Admin credentials.
8. Open the report file, add the Mod, and set it to "Always trust mods signed by 'TIBCO Software Inc.'" to check if the Mod can be trusted. Save the file to the Library.
9. In the Admin UI, navigate to Users & Groups > "Everyone" group > Trusted Signers > Add Certificates > From Library > Select "TIBCO Software Inc."
10. Access the saved Library file with the Mod on the Web Player, using different user IDs, to verify that the issue is resolved.