XIC: Updating certificates in the XIC_HPE.jks
1. Grant WRITE permissions on the XIC_HPE.jks and its related files, such as XIC_HPE_EP.ssl, XIC_HPE_PrivatePair.pem, and XIC_HPE_PubKey.pem
2. Execute the 'importCert.sh' script in the XIC installation's base directory, for example, /usr/local/XYPRO/webservices
2.1. at the "Which keystore do you want to import the certificate into?" prompt;
>>> Hit 2 to choose the 'XIC_HPE.jks' keystore file
2.2. at the "Enter the location of the certificate:" prompt;
>>> Enter the certificate file that has been used for HPE SSL Proxy, e.g. /G/SYSTEM/ZNSSSL/SERVCERT
2.3. at the "Enter an alias for the certificate:" prompt;
>>> Enter 'xic_hpe' as an aliasname if it does not exist. (the alias name can be validated by running 'keytool -list -keystore XIC_HPE.jks -v')
Enter 'y' key to complete the 'importCert.sh' script
3. Restart XIC to complete the import certificate process
3.1. Execute "./shutdown.sh" to stop XIC
3.2. Execute "./startup.sh" to start XIC
4. Restore the original permissions on the XIC_HPE.jks and its related files
If you are unable to locate the solution needed or if you need additional assistance, please Click Here to open a case from our Customer Care Portal.
Related Articles
XIC: How to remove and regenerate the certificate of alias xic from the XIC.jks keystore file
Step 1. Give write security on keystore syntax: chmod 600 <keystore-file> example: chmod 600 XIC.jks Step 2. Cleaning XIC.jks file, if there is a certificate chain for xic alias syntax: keytool -delete -keystore <keysotre-file> -alias <alias-name> ...
XIC: steps to use CA signed certificate between XTR and XIC
In the XTR installation: the CSR file needs to be created and then the CA Signed Certificate needs to be uploaded to the XTR installation - Validate all entries on the SSLTRCFG file. Note: CA_Cert should be SSLCACRT created by XTR installation. ...
XIC: Is XIC compatible with CyberArk version 12.2?
As of XIC 1.30, CyberArk 12.2 works with all available versions of XIC. If this article did not provide a solution, please open a case with our support team by sending an email message to support@xypro.com.
XIC: Where can the XIC log files be found?
There are three XIC log files: access.log error.log http.log The full log name will be in the following format: xic_<instance>_xxxx.log Where: <instance> is the name of the XIC instance provided at the time of installation. Usually, this is the name ...
XIC: syntax error for SCF script generated during XIC install
1. disable the TACL prompter macro in the TACLCSTM or 2. Customers can not run SCF persistent macros successfully but other than that XIC service be running if it is a manual run and users should be able to continue with password changes. If you are ...