USS Unable to connect to CA Service Catalog

Document ID : KB000099907
Last Modified Date : 01/06/2018
Show Technical Document Details
Issue:
Trying to setup the data source for USS to connect to service catalog, it cannot connect.
The liferay log shows the error:

19:03:00,216 ERROR [CATALOGSource:120] Throwing exception : EE_AUTHFAILED Authentication Failed
[Authenticate Error: Authentication Failed, Identity Attempted: null]
com.ca.eiam.SafeException: EE_AUTHFAILED Authentication Failed
...
 
Cause:
This was a test environment and EEM servers and config changed.
Resolution:
Re-issue Catalog's certs via the following: 

1) Stop Catalog service 
2) Move (i.e. cut/paste) the following to a backup directory from ..\Service Catalog: 

USMcertfile.key 
USMcertfile.pem 
USMcertfile.p12 

3) Copy the following to the EEM server: 

..\Service Catalog\scripts\EIAM\issueCertificate.xml and issueCertificateP12.xml 

4) Change the paths in the above .xml files to a valid directory on the EEM server (i.e. E:/USMcertfile.pem) 
5) On the EEM server open a command prompt and change directory into the following: 

..\CA\SC\EmbeddedEntitlementsManager\bin 

6) Run the following: 

safex -h <EEM hostname> -u eiamadmin -p <eiamadmin password> -f E:\issueCertificate.xml 
safex -h <EEM hostname> -u eiamadmin -p <eiamadmin password> -f E:\issueCertificateP12.xml 

7) Copy the following generated from the above commands to the root of the Service Catalog directory: 

USMcertfile.key 
USMcertfile.pem 
USMcertfile.p12 

8) Start Catalog service