Technical Tip: Installing user certificate causes error in UI
Description
/bsc/logs/tomcat-admin/catalina.out exception:
Jan 29 10:54:44 fortinac tomcat-admin: Jan 29, 2021 10:54:44 AM com.bsc.servlet.HeartbeatServletContextListener$Heartbeat run
Jan 29 10:54:44 fortinac tomcat-admin: INFO: TomcatAdmin Max Memory (KBytes) 970,752 Free Memory (KBytes) 653,193 Threads: 55 Up Time: 0 Days 0 Hours 3 Minutes 0 Seconds Fri Jan 29 10:54:44 PST 2021
Jan 29 10:54:46 fortinac tomcat-admin: java.lang.ClassCastException: [B cannot be cast to java.lang.String
Jan 29 10:54:46 fortinac tomcat-admin: at com.bsc.api.certmgmt.CertificateAttrs.<init>(CertificateAttrs.java:225)
Jan 29 10:54:46 fortinac tomcat-admin: at com.bsc.api.certmgmt.KeystoreCertificateOwner.getCertificateAttrs(KeystoreCertificateOwner.java:271)
Jan 29 10:54:46 fortinac tomcat-admin: at com.bsc.plugin.adminguicert._AdminGUICertOwner_Tie._invoke(Unknown Source)
<...>
Scope
Version: 8.8.2
Solution
Workaround: Contact Support for a workaround to clear the condition.
1. List the alias names for the certificate targets in the keystore
keytool -list -v -keystore /bsc/campusMgr/.keystore -storepass ^8Bradford%23 | grep -i alias
Example:
> keytool -list -v -keystore /bsc/campusMgr/.keystore -storepass ^8Bradford%23 | grep -i alias
Alias name: agent << Persistent Agent
Alias name: portal << Portal
Alias name: radius << Local RADIUS Server
Alias name: radius_trust_0 << RADIUS Endpoint Trust
Alias name: tomcat << Admin UI
2. Delete the target to which the user certificate was installed from the keystore
keytool -delete -alias <target alias> -keystore /bsc/campusMgr/.keystore -storepass ^8Bradford%23
Example: User certificate was installed to the Portal target
keytool -delete -alias portal -keystore .keystore -storepass ^8Bradford%23
The Certificate Management view should now be accessible in the UI.
3. Recreate the deleted target in the Certificate Management list. Click on another target then click Copy Certificate.
5. Click OK.
