Receiving "Failed to validate certificate" error message when trying to login in to Spectrum OneClick

Document ID : KB000019313
Last Modified Date : 14/02/2018
Show Technical Document Details


Since November 11, 2013, clients running with Spectrum versions from 9.2 H07 to H11 could get error messages "Failed to validate certificate" when opening the Spectrum OneClick console, however it is still possible to work without any restrictions or security problems.

The problem is observed because jar files shipped with the product are signed with a certification that has an expiration date. As mentioned there is no problem or restriction apart of getting the message.

The certificates we have currently for Spectrum 9.2.x and 9.3 and the expiration dates are as follows:

Spectrum 9.2.0 - released 4/29/2010 - certification used to sign jar files valid from 2009 to 2011
Spectrum 9.2.H07 - released 3/27/2012 - certification used to sign jar files valid from 2001 to Nov 11 2013
9.2.H12 & 9.3 - updated cert for 2013 to 2015


Clicking OK will all users to continue logging in to Spectrum OneClick without restrictions or security problems.

Figure 1

Customers should upgrade to hotfix patch H12 which includes updated certificates.

It is a requirement to clear the java cache after installing H12.

One way to clear the cache is to choose settings and then delete button, then choose all checkboxes and hit ok.

Figure 2

Notice that there is a known problem in Spectrum 9.2.3.H12 related to SANM filters. If you use SANM in your environment please contact CA Support first before installing hotfix patch H12 so that we can give you the PTF patch to resolve the SANM problem.