The SSL Certificate import failed

Hi all

environment information:

OS: windows server 2019

SQL : SQL 2019 Developer

Infor OS: 12.0.40

On the Ready to Install Infor OS UI. get the error message?The SSL Certificate import failed. Aborting the installtion.Refer log files for more information?

log:

==========================================================================================================================
[7-23-2020_09:03:32] : INFO : The Grid Host Router Node Status Check was successful.
[7-23-2020_09:03:32] : INFO : Starting the SSL Certificate import for TS Router
[7-23-2020_09:03:32] : INFO : Starting the runant batch file for import-ssl-certificate-for-techstack-router-identity
[7-23-2020_09:03:32] : INFO : The log file exists from a previous install. Deleting it.....
[7-23-2020_09:03:38] : ERR : The Import_SSL_TS_Router installation has returned error. Import_SSL_TS_Router installation failed.
[7-23-2020_09:03:38] : INFO : The file to be copied exists
[7-23-2020_09:03:38] : INFO : The Installer log file exists
7-23-2020_09:03:38 - ': C:/Program Files/Amazon Corretto/jdk1.8.0_252
C:/Program Files/Amazon Corretto/jdk1.8.0_252
JAVA="C:/Program Files/Amazon Corretto/jdk1.8.0_252\binjava.exe"
Buildfile: E:InforOSInstallGridHelperantuild.xml

grid.cli.jar.check:

set-grid-cli-jar-path:
[echo] grid.location: E:/Infor/OS/InforTechStackGrid
[echo] grid.cli.jar: E:InforOSInforTechStackGrid oolsgrid-cli.jar
[echo] Hostname: IOS

import-ssl-certificate-for-techstack-router-identity:
[java] Error: Import failed due to missing the ExtendedKeyUsage ServerAuthentication.

BUILD FAILED
E:InforOSInstallGridHelperantGrid.xml:2945: Java returned: 124

Total time: 5 seconds
ERRORLEVEL=124

[7-23-2020_09:03:38] : ERR : The SSL Certificate import failed. Aborting the installation

================================================================================================================================

How to solve it? Thank you

[View:https://imgur.com/5Z8cgFJ:320:50]

Attachment_4324.zip

b-28019.zip

Find more posts tagged with

Installation

Accepted answers

All comments

Jonathan Amiran

Hi, coded 124 might be bad ssl filetype

your certificate must be a PFX or P12 SSL certificate with a valid private key password that has been generated with 2048 bits encryption key and SHA-2 encryption algorithm .

also make sure that Common Name and DNS are to the FQDN host name, in the log your hostname is "IOS", I believe that it should be ios.xxxx.xx

Jonathan

unknown

Hi Jonathan

Thank you for your reply

a valid private key password that has been generated with 2048 bits encryption key and SHA-2 encryption algorithm

>>>when i create the certificate with OpenSSL, I had follow it.

make sure that Common Name and DNS are to the FQDN host name, in the log your hostname is "IOS", I believe that it should be ios.xxxx.xx

>>>I had check it. yes, it iso.corp.xxxx.com

I also find on the 'Infor Operating Service Installation Guide' write ?Make sure that the hostname or alias used contains only lowercase letters.?

so, i think is it a issuess?

Thank you.

Wayne

Jonathan Amiran

Hi,

I saw a post earlier today by TimBoyden that he have trouble installing IOS 2020-06 (the version after 12.0.40), and he said that the installation might have trouble with wildcard certificates.

You have a wildcard certificate for 100 years, I'm not really familiar with it, I only install IOS with AD CA.

Also the uppercase host name "IOS", I've checked and this how it is written in the log, so it's fine.

Jonathan

herve-bin

Hello,

as mentioned in your log, you may not have choose the right Enhanced Key usage.

You have to have this one : Server Authentication

I think that you have to add this to your cnf file

extendedKeyUsage = serverAuth

Hervé

unknown

Or just use https://certifytheweb.com/ to have the correct certificate created for you and managed automatically for free. You'll need to specify the fully qualified hostname (hostname.mydomain.com). I did this twice, once for my ADFS server and once for the Infor OS server. ADFS = fs.mydomain.com and certauth.fs.mydomain.com, and Infor OS = mingle-portal.mydomain.com. As far as I know these have to be publicly accessible hostnames because the installer does a check to validate the names. So you can't use self-generated certificates. Certificates generated by an AD CA that use a publicly addressable root certificate are probably OK. But I know a lot of people have setup their AD domains as mydomain.local and that will not work.

unknown

Hi Jonathan

OK, Thank you for your help.

Wayne

unknown

Hi Hervé

I've checked it,
it had been setting.

Thank you.

Wayne

unknown

Hi Tim

OK. I will try it. Thank you

Wayne

Copyright © 2025 Infor. All rights reserved.