JR64870: THE CONNECTION BETWEEN RPA AND UMS IS USING THE HOSTNAME WHICH ISN'T TRUSTED IN CLIENT CERTIFICATE.

APAR status

• Closed as program error.

Error description

• installed RPA and wanted to use UMS for SSO.
  
  - To secure the connection between RPA and UMS we want to use a
  client certificate.
  
  - The client certificate is for the alias name to be used for
  RPA.
  Unfortunately the connection between RPA and UMS is using the
  hostname which isn't trusted in client certificate.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Every user that uses SSO.                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * The browser doesn't trust the self-signed certificate that   *
  * is generated by the installer.                               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to 21.0.3                                            *
  ****************************************************************
  

Problem conclusion

• We now enable users to select their own certificate, so they can
  choose a certificate that is signed by a certificate authority
  and add the related hostname to the ums server. In this case,
  the certificate won't be presented as invalid.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RPA

• Fixed component ID

  5737N5100

Applicable component levels