Systinet Error: Certificate Name and Host Name Do Not Match (Magic xpa 3.x)
Resolving the error: Name in certificate ['IP address.domain'] doesn't match host name ['hostname.domain']
When this error is displayed by Systinet, instead of continuing past the Systinet console log in screen, a page with one of the following errors opens:
"Internet Explorer cannot display the webpage" or "Navigation canceled".
The error stems from a DNS-related problem at the time of the installation.
When installing Systinet, a self-signed certificate (server certificate) is generated.
If the installer fails in the translation process of the IP name to the machine name, the certificate is generated using the machine name; however, navigation in the Systinet console (after the login page) goes to an IP location (for example, http:// 10.1.14.251:6443/admin/console).
Resolving this problem consists of two steps:
-
Generating a new self-signed certificate.
-
Use PStoreTool, which is located in the Systinet bin folder.
-
Use the following command (in CMD) when the Systinet server is up and running. The input arguments are marked in bold:
PStoreTool,bat newServer -alias <the Alias for the SSL> -keyPassword <changeit or any other password> -subject <CN=...> -url http://localhost:6060 -username admin -password changeit
For example:
2. Configuring Systinet to work with the new generated alias and certificate.
-
Open the ServerConf.xml file, which is located under: %WASP_HOME%\conf\serverconf.xml.
-
Change the alias element under HttpsPreferences with the name used for the alias argument:
