Steps for fixing SSO certificate issue on Cisco CloudCenter 4.7

Updated guide:

1) Upload attached file (samlKeystore.jks). In case of HA mode it needs to do on both CCMs.

# cd /usr/local/tomcat/webapps/ROOT/WEB-INF/lib/

# cp /tmp/samlKeystore.jks security/

version of library based on CCC version:

# cp cliqr-security-4.7.2.jar ~/

# jar uf cliqr-security-4.7.2.jar security/samlKeystore.jks

# chown -R cliqruser.cliqruser cliqr-security-4.7.2.jar

# rm –rf security

2) /etc/init.d/tomcat restart

a)      For HA mode stop tomcat service on second CCM

3) log in to CCM with admin@osmosix.com user and on Manage Vendor Admins go to Authentication settings click on Update button. That would update corresponding metadata file.

4) Download SP Metadata XML file

            a) for HA mode copy xml file from CCM1 to CCM2, make sure permissions are the same as CCM1. Location of xml is  /usr/local/osmosix/metadata/sp/

            b) start tomcat service on second CCM

5) Upload that XML file to IDP

6)Validate solution

In case of multy tenants – it needs to repeat steps 3-5 for each tenant.