CA Service Management

 View Only

Visualizer over SSL 

Aug 08, 2016 07:52 PM

Since there is no documentation on setting up SSL for the visualizer, here are high level steps that you need to take:

 

  1. (For all application servers) Update the cmdbvisualizerconfig.properties
    1. %nxroot%\bopcfg\www\CATALINA_BASE_VIZ\webapps\CMDBVisualizer\WEB-INF\classes\com\ca\cmdbvisualizer\config
    2. update USD_WEBSERVICE_URL to point to the WSDL on the encrypted port you have set up for SDM tomcat
  2. (For all application servers) Update the CACERT file to make the certificate you are using for the ssl connector in Tomcat as a trusted source
    1. This is in the %JRE%\lib\security folder
    2. This file can be copied between servers
  3. (For all application servers) add an SSL connector to the server.xml for the visualizer tomcat
    1. %nxroot%\bopcfg\www\CATALINA_BASE_VIZ\conf\
  4. (For all application servers) update the Nx.env to point to the encrypted connecter for the visaulizer
    1. @NX_CMDB_VISUALIZER
  5. Restart SDM services

 

If you only want to have SDM encrypted, then follow the first 2 steps.

Statistics
0 Favorited
22 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

Sep 19, 2018 11:47 AM

I just noticed that if the hostname in URL of cmdbvisualizer.properties uses a Loadbalancer name I get the error, but if it points to itself then it seems to work

 

https://host-abc:9443/CMDBVisualizer/ works

 

https://SERVICEDESK-VIP:9443/CMDBVisualizer/ DOES NOT WORK, even though this DNS name works for SDM login.

Sep 19, 2018 11:33 AM

 

I have imported intermediate, root and SDM host cert into JRE's CACERT file. Restarted SDM service

 

On some servers I can now login to https://host:9443/CMDBVisualizer/

 

But on others I keep getting Role error.

 

in visualizer_log.log I see

 

09/18 06:45:16.579[https-jsse-nio-9443-exec-7] ERROR RoleBasedUI.getActiveRole(57)  - Error in getActiveRole with loginHandle and userName [Ljava.lang.StackTraceElement;@8951ec
09/18 06:45:16.579[https-jsse-nio-9443-exec-7] ERROR VisualizerHttpServlet.getLocale(80)  - Error fetching locale for the request

09/18 06:45:16.598[https-jsse-nio-9443-exec-7] ERROR LoginServlet.serviceRequest(154)  - com.ca.cmdbvisualizer.exceptions.RoleBasedException: Error while getting active role of the user with user name servicedesk.

Related Entries and Links

No Related Resource entered.