Verifying the Java Store Certificate

You can verify that a 3DOrchestrate Distribution Server and a 3DOrchestrate Station have the required certificate in the Java trust store.

The checker can verify SSL certificates automatically or by using a server's host and port. When you run in automatic mode, the checker verifies the SSL certificate for the following 3DEXPERIENCE servers: 3DSpace, MyApps, 3DPassport, and all known FCS. When you run the checker for a single server's host and port, the checker verifies the SSL certificate for the specified host and port only. If you want to verify SSL certificates for the 3DOrchestrate Distribution Server, you must run in SLL Verification using Host and Port mode.

These instructions explain how to start the 3DOrchestrate Checker from a command prompt. You can also run this checker from Station Administration. For more information, see Station Administration: Testing a Server or Station. Station Administration also enables you to test execution on both public and private stations for a selected server and to check the authentication of the server.

This task shows you how to:

Verify a Series of 3DEXPERIENCE Servers Automatically
Verify SSL Certificates For a Single Station or Server

Before you begin: The 3DOrchestrate Distribution Server must have the current Java version installed. If the 3DOrchestrate Checker returns the error Trust store check unsuccessful, upgrade the Java version on the server before rerunning the checker.

Verify a Series of 3DEXPERIENCE Servers Automatically

You can run the 3DOrchestrate Checker in automatic mode to test the SSL certificate for all the following 3DEXPERIENCE servers: 3DSpace, MyApps, 3DPassport, and all known FCS.

Note: If you want to test the SLL certificate for the 3DOrchestrate Distribution Server, run the checker in manual mode.

Launch the 3DOrchestrate Checker.
The checker executable, SMAExeCOSChecker, is available in the following directories:
- 3DOrchestrate (Linux): 3DOrchestrate_installation_location /linux_a64/code/command/SMAExeCOSChecker.sh
- 3DOrchestrate (Windows): 3DOrchestrate_installation_location\win_b64\code\command\SMAExeCOSChecker.bat
- Native client: native_client_installation_location \win_b64\code\command\SMAExeCOSChecker.bat
The 3DOrchestrate Checker opens.
Select Action > 3DORCHESTRATE Server/Station SSL Check > Check.
If the location specified in the Trust Store File field is incorrect, click Select Truststore and navigate to the appropriate server trust store. You should change trust store file location only if the specified location is incorrect.
From the SSL Verification options, select Automatic SSL verification check.
From the Enter 3DSpace URL and Password options, enter the URL and credentials of the server for which you want to perform the check.
The URL should follow the form https://hostname.com/3DSpace if the port is 443. If the server uses any other port, include the port in the URL as well by following the form https://hostname.com:portnum/3DSpace
Enter the username and password of a valid 3DEXPERIENCE user.
For cloud servers, enter the tenant ID.
Click Check.
The results of the check appear in the log window. You can display a detailed view of the log with more information about any errors that arise by selecting Log > View Log (Detail).
If the log includes messages like the ones below, the Java trust store did not have the certificate required.
```
[ ]: SSL Handshake failed. [ Host : hostname.com Port No: 443] [Check logs]
```
```
[ ]: SSL Handshake with 3DSpace failed. [Check logs] 
```
If the check failed, retrieve a copy of the certificate being used and install it in the Java trust store by following the instructions in Installing HTTPS Certificates in 3DOrchestrate.
When the installation is complete, rerun the check to confirm that the SSL handshake now succeeds.
A successful test yields messages like the ones below:
```
[ ]: Trust store check successful.
```
```
[ ]: SSL Handshake successful [Host: hostname  Port: portnum] 
```

Verify SSL Certificates For a Single Station or Server

Launch the 3DOrchestrate Checker.
The checker executable, SMAExeCOSChecker, is available in the following directories:
- 3DOrchestrate (Linux): 3DOrchestrate_installation_location /linux_a64/code/command/SMAExeCOSChecker.sh
- 3DOrchestrate (Windows): 3DOrchestrate_installation_location\win_b64\code\command\SMAExeCOSChecker.bat
- Native client: native_client_installation_location \win_b64\code\command\SMAExeCOSChecker.bat
The 3DOrchestrate Checker opens.
Select Action > 3DORCHESTRATE Server/Station SSL Check > Check.
If the location specified in the Trust Store File field is incorrect, click Select Truststore and navigate to the appropriate server trust store. You should change trust store file location only if the specified location is incorrect.
From the SSL Verification options, select SSL verification using host and port.
From the Enter Host and Port options, specify the host name and port number.
Click Check.
The results of the check appear in the log window. You can display a detailed view of the log with more information about any errors that arise by selecting Log > View Log (Detail).
If the log includes messages like the ones below, the Java trust store did not have the certificate required.
```
[ ]: SSL Handshake failed. [ Host : hostname.com Port No: 443] [Check logs]
```
```
[ ]: SSL Handshake with 3DSpace failed. [Check logs] 
```
If the check failed, retrieve a copy of the certificate being used and install it in the Java trust store by following the instructions in Installing HTTPS Certificates in 3DOrchestrate.
When the installation is complete, rerun the check to confirm that the SSL handshake now succeeds.
A successful test yields messages like the ones below:
```
[ ]: Trust store check successful.
```
```
[ ]: SSL Handshake successful [Host: hostname  Port: portnum] 
```