This knowledge article may contain information that does not apply to version 21.05 or later which runs in a container environment. Please refer to
Article Number 000385088 for more information about troubleshooting BMC products in containers.
When Smart Reporting or Smart Reporting LB is configured to work with HTTPS, the reporting certificate needs to be added on the Mid-Tier java trust store. Attached the documentation for same.Configuration for Mid-Tier to enable the Smart Reporting SSL:[Note: As the below steps are the Mid-Tier Configuration, this will need Mid-Tier Application Server restart]
- Enable Smart Reporting Tomcat App Server with SSL using standard Tomcat SSL Configuration
- Open Browser, navigate to Smart Reporting secured URL, and test SSL works using https://<SR_HostName>:<PORT>
For example: https://10.133.71.251:9443/
- Click on ,
- View Site Information from URL Address bar à Go to Connection à Certification Information à Details à Copy to file à Next à Select Base-64 encoded X.509 (.CER) à Next à Provide the Certification name and save .cer file and keep this handy
For example: Reporting.cer
- Go to Midtier tomcat server JAVA location.
For example: C:\Program Files\Java\jre1.8.0_65\lib\security And copy the Reporting.cer collected from JAVA path to above location.
- Now go to JAVA Directory to execute the Keytool.exe for enabling the trusted keystore between the Reporting and Midtier server:
If customer is using a custom JRE instance, they need to ensure CA Certs are also updated in the Java > jre > lib > security folder in addition to the standard Java > lib > security folder
For example:
- Open Command Prompt, navigate to à C:\Program Files\Java\jre1.8.0_65\bin>
- Run command C:\Program Files\Java\jre1.8.0_65\bin>keytool -import -keystore "C:\Program Files\Java\jre1.8.0_65\lib\security\cacerts" -file "C:\Program Files\Java\jre1.8.0_65\lib\security\Reporting.cer"
- Enter password : changeit <default>
- Once this command run successfully, below results should be observed
- Make sure the cacerts file gets modified by checking the Date Modified once the step 5.d went successful.
- Go to services and Restart the Mid-Tier tomcat Server
- Make sure the https smart reporting URL is configured in Mid-Tier Report Setting configuration
- Smart Reporting cross launch from Mid-Tier should work.
In case Smart Reporting is configure behind load balancer where SSL is configured only on load balancer, then it's mandatory to update the LB port (i.e proxy port) into Smart Reporting server.xml file as shown below
