Solved

Self-signed Certificate configure for IFS10 help

  • 25 June 2021
  • 4 replies
  • 917 views

Userlevel 2
Badge +4

Hi,

We are configuring IFS10 new demo setup in our environment, Can anyone help the below error using self assigned certificate without LB.

While connecting the apps the DDL says below

 

 System.Net.WebException
        - The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
        - Source: System
        - Stack trace:
            at System.Net.HttpWebRequest.GetResponse()
            at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
        --- Inner Exception ---
        System.Security.Authentication.AuthenticationException
        - The remote certificate is invalid according to the validation procedure.
        - Source: System
        - Stack trace:

icon

Best answer by Charith Epitawatta 25 June 2021, 15:47

View original

This topic has been closed for comments

4 replies

Userlevel 5
Badge +8

Hi @aravindhan,

For this error please try running F1Mage.exe in ifs_home. Through this try adding the certicate file. Location of the file is as below:

 [IFS_HOME]\instance\[instance_name]\repository\client\runtime\F1Mage.exe

 

Nilushi-

Userlevel 7
Badge +15

Hi @aravindhan 

Could you please check whether the certificate you have added through the installer is valid? If it has expired or not? Please use a valid certificate and do a reconfiguration with it to resolve this issue.

Hope this helps you!

Userlevel 7
Badge +31

Hi @aravindhan,

Have you added your self-signed certificate as a Trusted Root CA on your client machine? Since the error says “Could not establish trust relationship for the SSL/TLS secure channel”, this could be the case. To do that, you can go to the Application Server access point URL using Internet Explorer and follow the steps mentioned here:

https://techcommunity.microsoft.com/t5/windows-server-essentials-and/installing-a-self-signed-certificate-as-a-trusted-root-ca-in/ba-p/396105

After doing this, you may have to clear the browser caches before retrying. 

If that does not work, then it has to be a problem with your self signed certificate as @Ragaventhan Sathananda has mentioned. In which case you can regenerate a new self signed certificate from the installer by giving correct values.

Hope this helps!

Userlevel 2
Badge +4

Its works perfectly thanks a lot , Now another issue starts

Ifs.Fnd.FndSystemException: Unexpected error while calling server method ClientApplication/IdentifyCurrentUser

   at Ifs.Fnd.AccessProvider.FndConnection.InvokeInternal(Object requestBody, Object responseBody, String intface, String operation, FndRequestContext requestContext, FndManualDecisionCollection decisions, Boolean forcedSync, Boolean integrationGateway)
   at Ifs.Fnd.AccessProvider.FndConnection.InvokeInternal(String intface, String operation, Object requestBody, Object responseBody, FndRequestContext requestContext, Boolean forcedSync, Boolean integrationGateway)
   at Ifs.Fnd.AccessProvider.Interactive.FndLoginDialog.AuthenticateCredentials(FndLoginCredentials loginCreds) ---> Ifs.Fnd.FndSystemException: 500
   at Ifs.Fnd.AccessProvider.FndConnection.CallGetResponse(String intface, String operation, FndRequestContext requestContext, FndManualDecisionCollection decisions, Byte[] requestHeaderBytes, Byte[] requestBodyBytes, FndApfAsyncInvoke asyncInvokeHandle, Boolean integrationGateway)
   at Ifs.Fnd.AccessProvider.FndConnection.InvokeGetResponse(String intface, String operation, FndRequestContext requestContext, FndManualDecisionCollection decisions, Byte[] requestHeaderBytes, Byte[] requestBodyBytes, Boolean& abandoned, Boolean forcedSync, Boolean integrationGateway)
   at Ifs.Fnd.AccessProvider.FndConnection.InvokeInternal(Object requestBody, Object responseBody, String intface, String operation, FndRequestContext requestContext, FndManualDecisionCollection decisions, Boolean forcedSync, Boolean integrationGateway)
   --- End of inner exception stack trace ---