Return
-
Title
Having issue getting to app portal on iPad. Web pages appearing as a white page. How to build a certificate chain for Cloud Access manager -
Description
Trying to access mobile iPad apps and having issues with pulling the application up in CAM using Safari. Web pages appearing as a white page.
How to build a certificate chain for Cloud Access manager -
Cause
CAUSE 1: Certificate issue
CAUSE 2: Safari issue
-
Resolution
RESOLUTION 1:Build a keystore suitable for importing to Cloud Access ManagerThis worked example uses the OpenSSL tool and Keytool utilities to create a PKCS12 keystore for import into Cloud Access Manager.OpenSSL is available online here: https://www.openssl.org/The Keytool utility is installed with the Cloud Access Manager proxy and can be found at C:\Program files\Dell\Cloud Access Manager Proxy\j2sdk\jre\bin.Example:1 - Export the existing signed this-server certificate from the Cloud Access Manager proxy cacerts keystore as a PFX; this contains the certificate and private key:keytool -v -importkeystore -srckeystore cacerts -srcalias this-server -destkeystore thisserver.p12 -deststoretype PKCS122 - Convert the PKCS12 to PEM format - keeping the private key intact:openssl pkcs12 -in thisserver.p12 -out thisserver.pem -nodes -clcerts3 - Convert all the Certificate Authority root and/or intermediate certificate(s) required in the chain to PEM format:openssl x509 -in trusted_ca.cer -inform DER -out trusted_ca.pem4 - Concatenate the PEM files into a single file on the command line:type thisserver.pem trusted_ca.pem >> thisserverchain.pem5 - Create the PKCS12 keystore (in this example the private key is already contained in the PEM so there is no need to use the -inkey option but if your private key is separate then add '-inkey filename.key' to this command):openssl pkcs12 -export -in thisserverchain.pem -out thisserverchain.p126 - This keystore can now be uploaded to Cloud Access Manager using the ‘Import PKCS12/PFX file’ option on the Manage Certificates page of Settings in the Admin UI.RESOLUTION 2:1 - Turn off Safari backup to iCloud (as well as iCloud Drive)2 - Clear all history and website data from Safari. Confirm that all website data is completely removed by going to the advanced safari settings and check all history is fully cleared by going to the history tab in safari.3 - Test going to the page again4 - If all else fails you could try resetting one of the iPads, set it up as new (don’t restore from backup) and try accessing CAM again. -
Additional Information
The cacerts on the proxy should located at this location. You may have to specify the location on the keytool command. c:\program files\Dell\Cloud Access Manager Proxy\j2sdk\jre\lib\security The trusted_ca.cer file referenced is the intermediate certificate that is provided by your issuer. It gets converted to a .pem file which can be read by the type command. Afterwards it gets converted back to a pkcs12 file so it can be imported into Cloud Access Manager.