Summary
When the customer installs NAM AC service on SLES, the installation flow runs to ‘Configuring the Novell iManager:’ and get error ‘Error while creating the Tomcat connector certificate.’ After registering with SuSE Customer Centre, it works.

Products
Access Manager (NAM)

Environment
Access Manager version 5.0 SP3
SLES version 15 SP4

Situation
Customer wants to install NAM AC service on SLES but failed.

They could install AM 5.0.x on SLES 15 SP2 but not on SP3 and above
The installation flow runs to ‘Configuring the Novell iManager:’ and then gets error
Error while creating the Tomcat connector certificate.
The /tmp/novell_access_manager/configure_iman.log shows
Configuring the Novell iManager:
com.novell.nids.certmgr.DirCertException: Error: PKI_E_BAD_REQUEST_SYNTAX，Error: -1214
at com.novell.nids.certmgr.DirCerts .B(Unknown Source)
at com.novell.nids.certmgr.DirCerts .createCert(Unknown Source)
at com.novell.nids.certmgr.DirCerts .createCert(Unknown Source)
at com.novell.nids.install.MakeCertInKeystore.createCert(MakeCertInKeystore.java:234)
at com.novell.nids.install.MakeCertInKeystore.main(MakeCertInKeystore, java:360)
Error creating key tomcat. Exiting makecert.
Error while creating the Tomcat connector certificate.
The issue was even duplicated on SLES 12 SP5 by de-selecting a few patterns of default ‘Minimal’ installation.

Upgraded a SLES 15 SP2 server AM 5.0 SP2 to SLES 15 SP3 and AM services were still running though we still had the error against ‘novell-tomcat9’.

Solution
Register SUSE Linux Enterprise Server with SUSE Customer Center
Two ways to register.
Registering with YaST :-
start YaST › Software › Product Registration, provide the E-mail address and Registration Code, choose Next to start the registration process.
Registering with SUSEConnect :-
run SUSEConnect and replace REGISTRATION_CODE with the registration code you received with your copy of SUSE Linux Enterprise Server. Replace EMAIL_ADDRESS with the E-mail address associated with the SUSE account you or your organization uses to manage subscriptions.
sudo SUSEConnect -r REGISTRATION_CODE -e EMAIL_ADDRESS

Knowledge Base Article Link
URL Name
KM000015403