DevTest Certificate Errors Setting up SSL

Document ID : KB000093610
Last Modified Date : 01/05/2018
Show Technical Document Details
Issue:
Working on setting up SSL for our DevTest architecture. When accessing the portal at https: we're getting a Certificate Error click to continue on the webpage. We like to request assistance on these settings. We've installed it on a test server first to try it out. Thanks!
Environment:
DevTest 10.1.0, but can apply to all supported releases of DevTest.
Resolution:
Able to make progress based on some findings in this post (https://comm.support.ca.com/kb/enabling-ssl-for-the-devtest-portal/kb000075117).

We are able now to log in to the portal and also the workstation with ssl.

DevTest Server
To enable SSL on the DevTest Server, make the following configuration changes on the local.properties file and phoenix.properties file:
local.properties:
  1. Uncomment the following to enable:
    1. lisa.net.default.protocol=ssl
    2. lisa.webserver.https.enabled=true  
  2. Add the following to local.properties:
    1. https.protocols=TLSv1.2,TLSv1.1,TLSv1,SSLv3
    2. lisa.portal.url.prefix=https://
    3. devtest.port=443
phoenix.properties:
  1. Uncomment the following to enable:
    1. registry.https.enabled=true
    2. phoenix.https.enabled=true
    3. phoenix.port=443
    4. phoenix.ssl.keystore=${LISA_HOME}/CERT.jks (New SSL Cert)
    5. phoenix.ssl.keystore.password=mypassword (SSL Cert Pass)
    6. phoenix.ssl.keymanager.password=mypassword SSL Cert Pass)
DevTest Enterprise Dashboard Server
To enable SSL on the DevTest Dashboard Server, make the following configuration changes on the local.properties, phoenix.properties, site.properties and dradis.properties files:
 
local.properties:
  1. Uncomment the following to enable:
    1. lisa.net.default.protocol=ssl
    2. lisa.webserver.https.enabled=true  
  2. Add the following to local.properties:
    1. https.protocols=TLSv1.2,TLSv1.1,TLSv1,SSLv3
    2. lisa.portal.url.prefix=https:// 
    3. lisa.enterprisedashboard.server.url=ssl
    4. devtest.port=443
 
phoenix.properties:
  1. Uncomment the following to enable:
    1. registry.https.enabled=true
    2. phoenix.https.enabled=true
    3. phoenix.port=443
    4. phoenix.ssl.keystore=${LISA_HOME}/CERT.jks (New SSL Cert)
    5. phoenix.ssl.keystore.password=mypassword (SSL Cert Pass)
    6. phoenix.ssl.keymanager.password=mypassword SSL Cert Pass)
site.properties:
  1. To configure the registry to know that the Enterprise Dashboard is using HTTPS, uncomment the following:
    1. devtest.enterprisedashboard.https.enabled=true
dradis.properties:
  1. To configure the Enterprise Dashboard to use HTTPS, uncomment the following to enable:
    1. dradis.webserver.https.enabled=true
 
Create your own Self-Signed Certificate
Each DevTest Server, including the dashboard server, will need an SSL Certificate. Work with certificate administrator to generate a Java Keystore SSL Certificate through the your certificate management site.
Instructions to generate SSL Certificate:
Follow recommended CA DevTest instructions (steps 1-7) to configure certificate settings:
https://docops.ca.com/devtest-solutions/10-1/en/administering/security/using-ssl-to-secure-communication/use-your-own-self-signed-certificate
 
You can use the Java Keytool utility. Keytool can be found in DevTest directory: DevTest\CA\DevTest\jre\bin.