Support Article
Websphere server level keystore and truststore doesn't work
SA-37943
Summary
The user is having issue with connectors when keystore and truststore are defined at Websphere server level. To overcome this issue a local change was suggested to pass the keystore and truststore as JVM argument. This resolved the issue but caused SMA to fail. Deploying prsysmgmt into the different JVM independently works but user needs to have the SMA on the same JVM where Pega is running.
Error Messages
When keystore and truststore are defined at Websphere server level all connectors fails with
javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
With local of passing the keystore and truststore as JVM argument this connector works bur SMA fails with the following exception:
com.pega.jmx.ui.util.JMXClientException: Exception getting MBean Server connection. Fail to instantiate WASJMXConnector
Failed to get mbean server connection
SMA ERROR: Failed to create admin client
ADMC0016E: The system cannot create a SOAP connector to connect to host servername.com at port 1234
Steps to Reproduce
- Define keystore and truststore at Websphere server level
- Execute any REST connect rule with HTTPS endpoint
- The REST call will fail
- Pass the keystore and truststore as JVM argument
- Execute any REST connect rule with HTTPS endpoint
- It will be success but then
- Open a node from SMA
Root Cause
A defect in Pegasystems. Pega 721 OOTB doesn't support Websphere cell level keystore and truststore. The issue with the SMA is the side effect of setting the keystore and truststore through JVM argument . Resolving the first issue with Websphere cell level keystore and truststore support will automatically resolve the SMA issue.
Resolution
Apply HFix-34245
Then remove the JVM argument for Keystore and Trustore
Configure the certificates and keys at Websphere cell level
Published May 16, 2017 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.