Problem

While attempting to log into MettleCI Workbench after upgrading or changing the HTTPS certificates used by DataStage, the following error is presented and login does not occur:

Open

Cause

When communicating with DataStage over HTTPS, MettleCI Workbench needs to verify that the SSL Certificate used by DataStage has been signed by a trusted authority. Out of the box, MettleCI Workbench will trust all SSL Certificates signed by globally recognized Certificate Authorities but most DataStage installations use self-signed certificates. To trust a DataStage server using a self-signed certificate, the certificate needs to be added to MettleCI Workbench’s trust store.

MettleCI Workbench versions earlier than 1.0-924 used to share the same trust store used by DataStage clients, so assuming the DataStage engine had been trusted by running the UpdateSignerCerts command this error wouldn’t have occurred.

MettleCI Workbench versions 1.0-924 onwards uses a set of upgraded HTTPS security algorithms and maintains its own trust store which is no longer compatible with the trust store used by DataStage clients.

Solution

To add your DataStage Services Tier certificate to the trust store used by MettleCI Workbench to communication with your DataStage instance, run the following command from the MettleCI Workbench installation directory (eg. /opt/dm/mci):

…where X.X-XXX is the version of MettleCI Workbench currently in use.

After the command has completed, you can verify its success by checking the most recent entries in mci.log which should look something like the following: