We've had an issue with the Desktop client since we updated the tenant with the certificate.
When we start ARIS Architect/Designer, we get the next message:
Since we tried to install the next dialog appeared:
We tried different things with that certificate - installing it manually, etc. - and the result is the same; since you start the app next time, everything repeats again.
When you select the Proceed it allows to start Architect/Designer.
I'd appreciate any help on how to fix it.
Hi Alexander.
This certificate used is not an "official" one by an CA but a user created one. Anyway, the SSL certificate is not known by the certificate store of the used JRE on the users machine.
As "Sudheendra V Gaonkar" (thank you for that comment) mentioned, the download manager does not have access right to import this certificate.
This is an on-prem installation? You need a tweaked "cacerts" file, place this on the ABS, and it will be used with new downlaoder JAR files
How to get this file (this is an admin task):
Where to place this file:
on the abs, place it in (on all ABS nodes)
<server install dir>\server\bin\work\work_abs_<s|m|l>\base\webapps\abs\downloadClient\config
From that on, the cacerts will be used with the downloader (you need to get a new downloader file from the server).
Bye,
Frank
Hello Alexander,
Kindly check with ARIS Launcher log, sometime the access is denied when the certificate is being imported to cacert directory.
Check with IT team to provide sufficient privileges for you to install the certificate to the ARIS client.
The Error could be like below:
Error connecting via SSL: java.io.FileNotFoundException C:\Program Files\Java\jdk- Your IP\lib\security\cacerts (Access is denied)
Best Regards,
Hi Alexander.
This certificate used is not an "official" one by an CA but a user created one. Anyway, the SSL certificate is not known by the certificate store of the used JRE on the users machine.
As "Sudheendra V Gaonkar" (thank you for that comment) mentioned, the download manager does not have access right to import this certificate.
This is an on-prem installation? You need a tweaked "cacerts" file, place this on the ABS, and it will be used with new downlaoder JAR files
How to get this file (this is an admin task):
Where to place this file:
on the abs, place it in (on all ABS nodes)
<server install dir>\server\bin\work\work_abs_<s|m|l>\base\webapps\abs\downloadClient\config
From that on, the cacerts will be used with the downloader (you need to get a new downloader file from the server).
Bye,
Frank
Thank you, colleagues!
Yes, this is on-prem installation, will try to fix
Frank, thank you for your input, you very helped with this!
So there are the next steps were done:
1. ARIS Desktop was installed, since the first start in asked to install certificate. Just clicked on Install.
2. Then we found the file cacert in C:\<Installfolder>\ARIS10.0\client\jre17\lib\security on the local PC
3. Then that file cacert iwas copied to the server as Frank advised
<server install dir>\server\bin\work\work_abs_<s|m|l>\base\webapps\abs\downloadClient\config
4. Also, by Frank advise, we've downloaded the new .jar client, so everything works!
Thank you, sirs, for the help!