Article Number
000032460
Applies To
RSA Product Set: ECAT, NetWitness Endpoint
RSA Product/Service Type: ECAT
RSA Version/Condition: 4.0.x, 4.1.x, 4.2.x
Platform: Windows
RSA Product/Service Type: ECAT
RSA Version/Condition: 4.0.x, 4.1.x, 4.2.x
Platform: Windows
Issue
When trying to save the Live configuration the following error is seen:
Image description
Could not establish connection with Live Server. The changes made are not saved.
Image descriptionCause
The error occurs when the installer failed to configure the certificate.
Resolution
On the ECAT Sever confirm the RSA ECAT API Server service is running.
For ECAT 4.0.x open a browser and use the URL https://localhost:9443/api/v1/swagger-ui/, noting the use of HTTPS, not HTTP.
(if using ECAT versions 4.1.x or 4.2.x, open URL https://localhost:9443/api/v2/swagger-ui/)
If this URL does not open in the browser, the installer failed to configure the certificate. To resolve the error, run the following commands that manually complete the tasks that are supposed to be done by the installer.
1. Run as administrator a command prompt, and run the following to delete any previous certificate configured to use port 9443.
2. Run the following command:
To get the value of <thumbprint_of_ECAT_server_cert>, open the ConsoleServer.exe.config file that is located in the C:\ECAT\Server directory (default). It is the value of the LocalHttpsServerCertHash key. For example,
3. Insert the value of the LocalHttpsServerCertHash key into the command. For example,
4. For ECAT 4.0.x open https://localhost:9443/api/v1/swagger-ui/ in browser. It should now be accessible.
(if using ECAT versions 4.1.x or 4.2.x, open URL https://localhost:9443/api/v2/swagger-ui/)
5. Configure Live again and it should now work.
For ECAT 4.0.x open a browser and use the URL https://localhost:9443/api/v1/swagger-ui/, noting the use of HTTPS, not HTTP.
(if using ECAT versions 4.1.x or 4.2.x, open URL https://localhost:9443/api/v2/swagger-ui/)
If this URL does not open in the browser, the installer failed to configure the certificate. To resolve the error, run the following commands that manually complete the tasks that are supposed to be done by the installer.
1. Run as administrator a command prompt, and run the following to delete any previous certificate configured to use port 9443.
netsh http delete sslcert 0.0.0.0:9443
2. Run the following command:
netsh http add sslcert ipport=0.0.0.0:9443 certhash=<thumbprint_of_ECAT_server_cert> appid={0D90E141-9834-45CA-9426-C0E873106B2D}
To get the value of <thumbprint_of_ECAT_server_cert>, open the ConsoleServer.exe.config file that is located in the C:\ECAT\Server directory (default). It is the value of the LocalHttpsServerCertHash key. For example,
<add key="LocalHttpsServerCertHash" value="BE5775AECEBDE42A803FC2ED688563D7979D3CAC"></add>
3. Insert the value of the LocalHttpsServerCertHash key into the command. For example,
netsh http add sslcert ipport=0.0.0.0:9443 certhash=BE5775AECEBDE42A803FC2ED688563D7979D3CAC appid={0D90E141-9834-45CA-9426-C0E873106B2D}
4. For ECAT 4.0.x open https://localhost:9443/api/v1/swagger-ui/ in browser. It should now be accessible.
(if using ECAT versions 4.1.x or 4.2.x, open URL https://localhost:9443/api/v2/swagger-ui/)
5. Configure Live again and it should now work.
In this article
