automatic startup and enable.ssl

Salut Pierre

you can enter the set Command into the acc config file

generated.apptypes.current.cfg 

and use it as a parameter to start acc

Regards, Martin

Thanks Martin...

i add in generated.apptypes.cfg the line "set acc config enable.ssl=false"

but i've still the same error when starting acc...

C:\Windows\system32>C:\SoftwareAG\ARIS9\server\acc\acc.bat -h localhost -c "C:\SoftwareAG\ARIS9\server\generated.apptypes.cfg"  -u Clous -p 9001 -pwd g3h31m startall

Unable to add node localhost to ensemble.

Could not connect to http://localhost:9001/rest. Make sure that an agent is runn

ing on this machine and that the specified port is correct. Also check if you us

ed the right protocol to communicate with the agent (you used HTTP, try HTTPS).

The service ARIS Agent 9.8 is not started, (although it's in autamatic mode), but when i start it mannually, the result for acc is the same...

regards,

pam

in fact, the ARIS Agent is not started even if i try manually to start the service.

Hi,

ARIS has two separate SSL infrastructures. If you  say , you installed an SSL certificate and use SSL, you refer to the standard SSL infrastructure with the certificate enhanced in the loadbalancer and the SSL enabled in the ARIS modeling clients.

The ACC/Agent system has its own SSL infrastructure.

In order to enable it correctly, you need to import your certificate also in the  agent service truststore (keystore.jks), configure key alias/truststore password in the agent using an ACC and enable it at the agent side with " set enable.ssl=true ".

If this is done correctly, you have to use SSL connection with the ACC client from now on, either by using the ACC command line  switch "-SSL" or using the mentioned"set acc config enable.ssl=false " method with generated.apptypes.cfg.

Take note:

client side (ACC)  : set acc config enable.ssl=false

server side (agent service) set enable.ssl=true ".

Regarding your problem..

You enabled SSL at the agent service without the proper SSL certificate and configuration which causes the service to hang because it cannot access its SSL cert.



If you want to go back..

The is an agent.user.cfg file located at the server side (<ARIS installation directory>\server\bin\agent.user.cfg which contains all user changed values. Edit it and remove the "set enable.ssl=true" entry and restart the service

If you want to go forward... (after going back ;-)  in order to reach the ACC console again )

use "show cfg verbose " and look at the ssl.* entries telling you loction and default truststore password.



Regards

Patrik