TIBCO MFT Command Center and Internet Server - How to update Connection Manager Keystore

TIBCO MFT Command Center and Internet Server - How to update Connection Manager Keystore

book

Article ID: KB0072026

calendar_today

Updated On:

Products Versions
TIBCO Managed File Transfer Command Center All

Description

Customers using the Connection Manager should update the keystores on both the Connection Manager Server (CMS) and Connection Manager Agent (CMA) as soon as possible. The CMS/CMA keystore distributed  with Command Center and Internet Server 8.4.2 and below has some issues that require it to be updated:
 

1.  The certificate is 1024 bits
2.  The certificate expires on November 12, 2023
3.  The certificate uses SHA1withRSA

Using the existing keystore can result in the following error when Command Center connects to the CMS or the CMA to perform "Get Status" or "Retrieve Config":
 
Internet Server Error: SuperAction.ParseExceptionMsg - err: Connection failed. Details: SSLHandshakeException: Certificates do not conform to algorithm constraints

Environment

All supported environments

Resolution

Instructions for updating the keystore on both CMS and CMA

1) Download the attached keystore file tibcoconnmgrnode.jks to a temp folder on each CMS and CMA server.
 
2) Rename the existing CMS/CMA keystores
CMS
Windows: rename <install>/cmsserver/tibcoconnmgrnode.jks  <install>/cmsserver/tibcoconnmgrnode.jks.backup
UNIX: mv <install>/cmsserver/tibcoconnmgrnode.jks  <install>/cmsserver/tibcoconnmgrnode.jks.backup
 
CMA
Windows: rename <install>/cmaserver/tibcoconnmgrnode.jks  <install>/cmaserver/tibcoconnmgrnode.jks.backup
UNIX: mv <install>/cmaserver/tibcoconnmgrnode.jks  <install>/cmaserver/tibcoconnmgrnode.jks.backup
 
3) Copy the new keystore file tibcoconnmgrnode.jks downloaded in step 1 to both CMS and CMA
CMS
Windows: copy <temp>/tibcoconnmgrnode.jks  <install>/cmsserver/
UNIX: cp <temp>/tibcoconnmgrnode.jks  <install>/cmsserver/
 
CMA
Windows: copy <temp>/tibcoconnmgrnode.jks  <install>/cmaserver/
UNIX: cp <temp>/tibcoconnmgrnode.jks  <install>/cmaserver/
 
4) Restart the CMS/CMA servers

Issue/Introduction

TIBCO MFT Command Center and Internet Server - How to update Connection Manager Keystore for Connection Manager Server (CMS) and Connection Manager Agent (CMA)

Attachments

TIBCO MFT Command Center and Internet Server - How to update Connection Manager Keystore get_app