How to resolve "RMI Exception" while logging into Studio with Encrypt option ?

How to resolve "RMI Exception" while logging into Studio with Encrypt option ?

book

Article ID: KB0070714

calendar_today

Updated On:

Products Versions
TIBCO Data Virtualization All Supported Versions

Description

How to resolve "RMI Exception" while logging into Studio with Encrypt option ?

Resolution

The RMI exception occurs if any of the following are true:

(1)  The certificate is not in the Studio truststore

You have imported a new certificate into the TDV server, but this certificate has not yet been imported into the Studio truststore file (i.e. <TDV install dir>\conf\studio\security\cis_studio_truststore_strong.jks). You will need to do the following:

(i) Import the certificate into the Studio truststore using the keytool utility

Example
"C:\Program Files\TDV76\jre\bin\keytool" -import -trustcacerts -alias RootCert -file RootCert.pem  -keystore "C:\Program Files\TDV76\conf\studio\security\cis_studio_truststore_strong.jks"

Note: If this is a certificate chain, make sure to import all the certificates in the chain. For instance, if there are 3 certificates in the chain, then you would run keytool thrice:

"C:\Program Files\TDV76\jre\bin\keytool" -import -trustcacerts -alias RootCert -file RootCert.pem  -keystore "C:\Program Files\TDV76\conf\studio\security\cis_studio_truststore_strong.jks"

"C:\Program Files\TDV76\jre\bin\keytool" -import -trustcacerts -alias IntermediateCert -file IntermediateCert.pem  -keystore "C:\Program Files\TDV76\conf\studio\security\cis_studio_truststore_strong.jks"

"C:\Program Files\TDV76\jre\bin\keytool" -import -trustcacerts -alias FinalCert -file FinalCert.pem  -keystore "C:\Program Files\TDV76\conf\studio\security\cis_studio_truststore_strong.jks"


(ii) Use keytool to list out the certificates in the truststore, and verify that the certificates are marked "trustedCertEntry"

Example
"C:\Program Files\TDV76\jre\bin\keytool" -list -v -keystore "C:\Program Files\TDV76\conf\studio\security\cis_studio_truststore_strong.jks"

   Alias name: RootCert
   Entry type: trustedCertEntry
   Alias name: IntermediateCert
   Entry type: trustedCertEntry
   Alias name: FinalCert
   Entry type: trustedCertEntry


This example shows that all 3 certificates in the chain are present in the Studio truststore as trusted certificates.

(2)  The truststore path (or the truststore password) is incorrect in the file <STUDIO_INSTALL>\bin\studio.bat

Open studio.bat with a text editor,  and verify that the following 2 lines have accurate values:

---------------------------------------------------------------------------------
set STRONG_TRUSTSTORE_FILE=%CONF_INSTALL_DIR%\conf\studio\security\cis_studio_truststore_strong.jks
set STRONG_TRUSTSTORE_PASSWORD=changeit
----------------------------------------------------------------------------------

(3)  The Studio truststore file cannot be found on the system

To eliminate this as a possible cause, ensure that the location specified for STRONG_TRUSTSTORE_FILE is correct in studio.bat as explained in (2) above.

Issue/Introduction

How to resolve "RMI Exception" while logging into Studio with Encrypt option ?