How to rebuild Service Catalog certs?

Document ID : KB000094935
Last Modified Date : 07/05/2018
Show Technical Document Details
Issue:
After Java 8 upgrade Catalog does not allow authentication

We followed the tasks to upgrade java to 1.8.0_45 in the post CUM4 tasks. After this Catalog could not connect to EEM.
 
Resolution:
1) Stop Catalog service
2) Move (i.e. cut/paste) the following to a backup directory from ..\Service Catalog:

USMcertfile.key
USMcertfile.pem
USMcertfile.p12

3) Copy the following to the EEM server:

..\Service Catalog\scripts\EIAM\issueCertificate.xml and issueCertificateP12.xml

4) Change the paths in the above .xml files to a valid directory on the EEM server (i.e. E:/USMcertfile.pem)
5) On the EEM server open a command prompt and change directory into the following:

..\CA\SC\EmbeddedEntitlementsManager\bin


create folder c:\CA\Service Catalog

6) Run the following:

safex -h <EEM hostname> -u eiamadmin -p <eiamadmin password> -f E:\issueCertificate.xml
safex -h <EEM hostname> -u eiamadmin -p <eiamadmin password> -f E:\issueCertificateP12.xml

7) Copy the following generated from the above commands to the root of the Service Catalog directory:

USMcertfile.key
USMcertfile.pem
USMcertfile.p12

8) Start Catalog service