Alerts

Expiring Certificate for Dimensions CM on September 24 2018 - this will result in "PRG7700117E Error: Untrusted endorsing credentials" when logging into Dimensions



ID:    A88
Published:    10 September 2018
Updated:    10 September 2018

Product(s)

  • Dimensions CM
 

Description

If your Dimensions installation satisfies all of the below conditions then on 24th September 2018 a certificate will expire and you will be unable to logon to the Dimensions CM Desktop Client, DMCLI, .NET or Eclipse.  You will get an authentication error "PRG7700117E Error: Untrusted endorsing credentials". 

SSO with CAC is being used (either from SBM or CM)
Default Certificates are being used

Self-Check 
Are the following two variables set in the Dimensions CM Server dm.cfg file?

DM_AUTH_TYPE_DBS  SSO
SSO_SERVER_CERTIFICATE  %DM_DFS%cm.pem 

If yes then the expiry date of the certificate can be checked by issuing the below command where <filename> is the name of the certificate file referenced by the SSO_SERVER_CERTIFICATE variable. 

openssl x509 -in "<filename>" -text -noout 

For Example:

E:\Program Files\Micro Focus\Dimensions 14.4\CM\dfs>openssl x509 -in "cm.pem" -text -noout
WARNING: can't open config file: /usr/local/ssl/openssl.cnf
Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            c7:e4:29:ce:a1:b7:d3:b3
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=UK, ST=Hertfordshire, L=St. Albans, O=Serena Software, Inc., OU=Dimensions, CN=CM Server
        Validity
            Not Before: Sep 25 14:42:23 2013 GMT
            Not After : Sep 24 14:42:23 2018 GMT

        Subject: C=UK, ST=Hertfordshire, L=St. Albans, O=Serena Software, Inc., OU=Dimensions, CN=CM Server
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:8d:f8:6b:78:dd:22:bb:cc:84:1f:12:20:
                    0b:3b:e3:61:b4:76:b1:41:d2:3f:ca:23:b5:2d:08:
                    a4:06:d5:0d:c0:a6:23:29:6c:ad:b6:9c:98:04:19:
                    ab:80:63:ce:26:16:4b:e0:b3:bf:50:25:c9:ab:85:
                    60:d3:d7:dc:5a:d9:28:c2:25:32:d5:39:54:a4:08:
                    63:73:ea:a5:3b:24:db:8a:a8:d9:ea:ff:2e:8b:c8:
                    36:da:e5:6d:84:0f:88:8f:b3:e4:09:d5:98:1a:c2:
                    29:46:4b:ef:1d:c0:bb:70:ff:d3:12:b4:d8:f4:d1:
                    c4:d3:ab:2a:89:eb:ce:e9:16:ed:df:44:33:13:a8:
                    56:52:61:f5:40:c0:bd:57:21:8f:cc:61:cf:f5:04:
                    d9:26:46:d1:dd:4a:bf:55:06:af:4d:ec:a9:18:ab:
                    ab:dd:93:53:6b:3f:93:55:b5:8a:4e:a4:84:e7:47:
                    78:27:42:4f:1b:3c:7e:db:92:d8:6f:7b:f0:39:00:
                    dc:2c:97:12:63:04:d5:26:03:55:92:cd:ff:60:57:
                    64:a6:2d:70:74:ab:31:6c:42:b1:6d:3b:e9:c5:ae:
                    07:7f:eb:df:1e:27:e2:d9:66:d9:b1:ba:63:30:b7:
                    02:29:a8:5a:20:9d:7f:a2:aa:de:37:de:b6:3c:2b:
                    74:65
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha1WithRSAEncryption
         1d:cc:00:d8:9d:a0:56:28:e0:f3:a1:d4:fd:cf:4e:ae:1b:2d:
         13:b1:ff:4c:e8:ed:be:6e:38:00:82:58:4d:9d:9d:79:e1:af:
         62:33:7f:e2:31:50:c2:99:2d:94:6b:3c:2d:42:39:bf:47:14:
         3f:50:ff:cf:3d:4c:5c:68:0c:a7:ee:de:af:5e:e5:d7:3c:c6:
         20:09:c2:58:eb:e2:c3:22:eb:42:84:60:f2:e5:fa:30:33:8f:
         0d:2d:b3:95:9e:3c:45:e0:59:b3:93:52:bb:35:0e:a6:9b:90:
         20:3c:54:11:b5:ce:58:b8:d9:1d:16:13:c7:e7:19:07:f3:02:
         4e:57:bc:d7:c8:29:f7:20:90:31:bf:cc:36:ee:00:a2:2a:c0:
         cb:20:bc:84:e7:48:21:28:1d:0d:e5:94:52:1d:ad:d4:46:04:
         98:49:a6:cc:52:4e:e2:c0:46:9e:d1:30:12:aa:6b:b7:9d:52:
         3c:8b:21:78:17:8b:76:1d:e7:d7:cc:26:c2:a2:4a:15:b1:6c:
         d2:36:13:22:5e:cd:0c:5c:bf:47:ac:47:77:ef:e2:df:44:9a:
         b6:db:b1:de:cd:2d:c6:47:e6:49:67:9f:a0:a1:e0:07:55:eb:
         1a:8b:59:23:ee:a0:1a:46:9e:3c:81:f4:cc:f5:a7:28:3b:51:
         06:8b:f9:dd

 

Symptoms 
You will be unable to logon to the Dimensions CM Desktop Client, DMCLI, .Net and Eclipse.  An authentication error "PRG7700117E Error: Untrusted endorsing credentials" will be received.
 

How to resolve

For Dimensions 14.x, please to to Knowledgebase Solution S142681 to generate a new key and establish a trust with the SSO Server.

For Dimensions 12 or 2009R1, please go to Knowledgebase Solution S140601 to generate a new key and establish a trust with the SSO Server.

Find Answers

Type a question or describe what you are looking for below

My Recent Searches

Welcome kb sso

Additional Assistance

  • Submit a Case Online
  • FAQs