TIBCO MFT Command Center and Internet Server - How to update Connection Manager Keystore
Article ID: KB0072026
Updated On:
| Products | Versions |
|---|---|
| TIBCO Managed File Transfer Command Center | All |
Description
Customers using the Connection Manager should update the keystores on both the Connection Manager Server (CMS) and Connection Manager Agent (CMA) as soon as possible. The CMS/CMA keystore distributed with Command Center and Internet Server 8.4.2 and below has some issues that require it to be updated:
1. The certificate is 1024 bits
2. The certificate expires on November 12, 2023
3. The certificate uses SHA1withRSA
Using the existing keystore can result in the following error when Command Center connects to the CMS or the CMA to perform "Get Status" or "Retrieve Config":
Internet Server Error: SuperAction.ParseExceptionMsg - err: Connection failed. Details: SSLHandshakeException: Certificates do not conform to algorithm constraints
Environment
All supported environments
Resolution
Instructions for updating the keystore on both CMS and CMA
1) Download the attached keystore file tibcoconnmgrnode.jks to a temp folder on each CMS and CMA server.
1) Download the attached keystore file tibcoconnmgrnode.jks to a temp folder on each CMS and CMA server.
2) Rename the existing CMS/CMA keystores
CMS
Windows: rename <install>/cmsserver/tibcoconnmgrnode.jks <install>/cmsserver/tibcoconnmgrnode.jks.backup
UNIX: mv <install>/cmsserver/tibcoconnmgrnode.jks <install>/cmsserver/tibcoconnmgrnode.jks.backup
CMA
Windows: rename <install>/cmaserver/tibcoconnmgrnode.jks <install>/cmaserver/tibcoconnmgrnode.jks.backup
UNIX: mv <install>/cmaserver/tibcoconnmgrnode.jks <install>/cmaserver/tibcoconnmgrnode.jks.backup
3) Copy the new keystore file tibcoconnmgrnode.jks downloaded in step 1 to both CMS and CMA
CMS
Windows: copy <temp>/tibcoconnmgrnode.jks <install>/cmsserver/
UNIX: cp <temp>/tibcoconnmgrnode.jks <install>/cmsserver/
CMA
Windows: copy <temp>/tibcoconnmgrnode.jks <install>/cmaserver/
UNIX: cp <temp>/tibcoconnmgrnode.jks <install>/cmaserver/
4) Restart the CMS/CMA servers
Issue/Introduction
TIBCO MFT Command Center and Internet Server - How to update Connection Manager Keystore for Connection Manager Server (CMS) and Connection Manager Agent (CMA)
Feedback
Yes
No
Powered by
