KB485275: How to generate a trusted certificate for Cloud Object connectors

Description

For security purposes, two-way SSL communication is established between the Cloud Object connector component and Strategy Intelligence server. After installation, the keys are generated and configured, ready to be used in your environment. 
However, if the keys are expired, you may encounter errors when using a Cloud Object connector. The following is an example of an error message that occurs in Strategy Web. 
There is an error on the server. 
Cloud Connector REST service responded with an error status code
 

The following is an example of a message in the Cloud Object connector folder (located in

/mstrinstallpath/CloudObjectConnector

WARN apache.tomcat.util.net.SSLUtilBase: The trusted certificate with alias [client-cert] and DN [CN=TEC-W-007620.labs.Strategy.com, EMAILADDRESS=client@mstr.com, OU=Tech-CC-Client, O=Strategy, L=Mclean, ST=VA, C=US] is not valid due to [NotAfter: Fri Oct 22 16:11:24 EDT 2021]. Certificates signed by this trusted certificate WILL be accepted

Solution 

Regenerate the set of trusted certificates for Cloud Object connectors. A script is provided for this purpose as listed below:

• Windows:

  C:\Program Files (x86)\MicroStrategy\CloudObjectConnector\quick-start\scripts\generate.bat

• Linux:

  MSTRInstallPAth/CloudObjectConnector/quick-start/scripts/generate.sh

If you need to customize the SSL key parameters, you can change the configuration files 

req-server.conf

req-client.conf

• Windows:

  C:\Program Files (x86)\MicroStrategy\CloudObjectConnector\key

• Linux:

  MSTRInstallPAth/CloudObjectConnector/key

1. Execute the script directly on your machine where the Cloud Object connector is installed. 
   You can add the parameter "password" for SSL communications, for example,

   generate.bat mypasswd

   . Please note that the password should be greater than six characters. If no parameter is defined, the script will use the default password, which can be found in the script "PASSWRD" parameter definition.
   After execution, you can find the updated

   .pem

   files under the 

   CloudObjectConnector\key

   folder.
   
2. Update the configuration file for the Cloud Object connector to adopt the new password.
   Go to the 

   CloudObjectConnector\config

   folder, modify the "key-store-password" field to the updated password for key generation in step 1.
   
3. Restart Cloud Object connector.
   On Windows, Cloud Object connector can be restarted in Services.
   On Linux, use command

   CloudObjectConnector/CloudObjectConnector.sh

   restart.