KB48056: "Unable to initialize SSL Context" and "Fail to start SSL server" error occurs in DSSErrors.log after Intelligent Server startup in MicroStrategy

• Strategy

The following knowledge base article describes one possible cause of the error "MSINetServerI::InitSSLContext() error: Unable to initialize SSL Context. Please check that the certificate paths and/or key password are correct." a solution is provided.

SYMPTOM:

In Strategy 2021 and newer, after Intelligent Server startup, below entries are observed in one of the node’s DSSErrors.log in a two nodes cluster environment.


MSINetServerI::InitSSLContext() error: Unable to initialize SSL Context. Please check that the certificate paths and/or key password are correct.
StartUpManager::InitChannels(): Fail to start SSL server. One or more required certificates and/or keys may be missing.

CAUSE:

Checking the registry key for “CACertificatePath”, “CertificateKeyPassword”, “CertificatePath”, “KeyPath”, “SSLPort” in [HKEY_LOCAL_MACHINE\SOFTWARE\MicroStrategy\Data Sources\CastorServer as shown below:


[HKEY_LOCAL_MACHINE\SOFTWARE\MicroStrategy\Data Sources\CastorServer]
"CACertificatePath"=""
"CertificateKeyPassword"=""
"CertificatePath"=""
"KeyPath"=""
"SSLPort"=dword:00009999

NODE B:


[HKEY_LOCAL_MACHINE\SOFTWARE\MicroStrategy\Data Sources\CastorServer]
"CACertificatePath"=""
"CertificateKeyPassword"=""
"CertificatePath"=""
"KeyPath"=""
"SSLPort"=dword:ffffffff

For both nodes, KeyPath, CertificatePath and CertificateKeyPassword are empty indicates SSL has not been configured yet.

But one of node’s port has set to dword:00009999, same value as Service Manager default SSL port 39321; while for the other node, it has port set to ffffffff = 4294967295. This indicate turning off SSL, there are no errors since Intelligent Server does not attempt to initialize SSL.

ACTION:

Disable SSLPort if SSL connection is not configured on all nodes. The registry key SSLPort can be manually updated to 0.

Below steps can be referred if Intelligence Server is on UNIX:
     1    Stop the Server
     2    Take a backup of MSIReg.reg
     3    Change the port manually to “SSLPort”=dword:ffffffff
     4    Start the Server

Comment

0 comments

Details

Knowledge Article

Published:

May 31, 2017

Last Updated:

March 7, 2024

MSINetServerI::InitSSLContext() error: Unable to initialize SSL Context. Please check that the certificate paths and/or key password are correct. StartUpManager::InitChannels(): Fail to start SSL server. One or more required certificates and/or keys may be missing.