Unable to install hotfix's
Unable to install the hotfix even after followed the instructions mentioned in Verifying hotfix authenticity by using a Pega Keystore
1) Getting the following error when importing hotfix file.
2) Downloaded the certificate from digicert.com
3) Using the utility, create a Java KeyStore (JKS) with the DigiCert root certificate:
-
keytool -import -trustcacerts -keystore pegahotfixkeystore.jks -file DigiCertTrustedRootG4.crt -alias pegahotfix
4) Created keystore file and uploaded the generated JKS file .
5) Created DSS
Unable to install the hotfix even after followed the instructions mentioned in Verifying hotfix authenticity by using a Pega Keystore
1) Getting the following error when importing hotfix file.
2) Downloaded the certificate from digicert.com
3) Using the utility, create a Java KeyStore (JKS) with the DigiCert root certificate:
-
keytool -import -trustcacerts -keystore pegahotfixkeystore.jks -file DigiCertTrustedRootG4.crt -alias pegahotfix
4) Created keystore file and uploaded the generated JKS file .
5) Created DSS
Application server was restarted but still issue is not resolved .
***Edited by Moderator Marije to add Case ID tags***
Accepted Solution
Pegasystems Inc.
GB
@BRAHMESH@ I can see that the ticket was closed with the below explanation:
1 Problem was caused because DL with hotfix was created before the May 23. And contain a old signed certificat that is why we saw error related missing certificate. Even if client followed documentation and imported certificate to the keystore.
2. With the new DL client received next error related to infrastructure restrictions regarding the revocation check.
The problem was resolved by disabling revocation check.
Beginning in May 2023, if your application uses firewalls to block outside connections, add the latest validation HTTP endpoints, using port 80, and the appropriate details to your firewall allow lists. https://docs.pega.com/bundle/platform-88/page/platform/deployment/hotfixes-verify-auth-automatic.html#verify-hotfix-files-during-install
@BRAHMESH@ I can see that the ticket was closed with the below explanation:
1 Problem was caused because DL with hotfix was created before the May 23. And contain a old signed certificat that is why we saw error related missing certificate. Even if client followed documentation and imported certificate to the keystore.
2. With the new DL client received next error related to infrastructure restrictions regarding the revocation check.
The problem was resolved by disabling revocation check.
Beginning in May 2023, if your application uses firewalls to block outside connections, add the latest validation HTTP endpoints, using port 80, and the appropriate details to your firewall allow lists. https://docs.pega.com/bundle/platform-88/page/platform/deployment/hotfixes-verify-auth-automatic.html#verify-hotfix-files-during-install
You can disable the revocation check using this documentation link: https://docs.pega.com/bundle/platform-88/page/platform/deployment/hotfixes-disable-auth-check.html
I will close this thread based on the above resolution.
LTIMindtree
SA
We too had the same problem so disabled the Hotfix enable revocation DSS setting for temporary need basis.
It's advisable to raise an INC with Pega GCS as a BUG
Skandiabanken
SE
@Kishore Sanagapalli Even setting the DSS( hotfixmanager/enableRevocation) value as false also didn't help.
Skandiabanken
SE
@MarijeSchillern INC-A23355
Accepted Solution
Pegasystems Inc.
GB
@BRAHMESH@ I can see that the ticket was closed with the below explanation:
1 Problem was caused because DL with hotfix was created before the May 23. And contain a old signed certificat that is why we saw error related missing certificate. Even if client followed documentation and imported certificate to the keystore.
2. With the new DL client received next error related to infrastructure restrictions regarding the revocation check.
The problem was resolved by disabling revocation check.
Beginning in May 2023, if your application uses firewalls to block outside connections, add the latest validation HTTP endpoints, using port 80, and the appropriate details to your firewall allow lists. https://docs.pega.com/bundle/platform-88/page/platform/deployment/hotfixes-verify-auth-automatic.html#verify-hotfix-files-during-install
@BRAHMESH@ I can see that the ticket was closed with the below explanation:
1 Problem was caused because DL with hotfix was created before the May 23. And contain a old signed certificat that is why we saw error related missing certificate. Even if client followed documentation and imported certificate to the keystore.
2. With the new DL client received next error related to infrastructure restrictions regarding the revocation check.
The problem was resolved by disabling revocation check.
Beginning in May 2023, if your application uses firewalls to block outside connections, add the latest validation HTTP endpoints, using port 80, and the appropriate details to your firewall allow lists. https://docs.pega.com/bundle/platform-88/page/platform/deployment/hotfixes-verify-auth-automatic.html#verify-hotfix-files-during-install
You can disable the revocation check using this documentation link: https://docs.pega.com/bundle/platform-88/page/platform/deployment/hotfixes-disable-auth-check.html
I will close this thread based on the above resolution.