New board topics in Hybrid Cloud Management

HCM User Config From LDAP with attribute uidwhich we don't have in AD

Gops1234 — Mon, 30 Sep 2019 01:18:13 GMT

We are in the process of Implementing HCM which requires connectivity through LDAP and its with attribute of uid which is not there in Active Directory..got the info that earlier vesrions had sAmAccount name and email address as login attributes.Ours is 2019 version .Kindly update how to proceed

Componenent property update

Bshiri — Thu, 26 Sep 2019 14:40:16 GMT

Does CSA launch modification actions on a given compoenent after a porpoerty update on the same component ? If yes how to configure this ?

How to Create a User in CSA and MPP

Rohit Joshi — Thu, 26 Sep 2019 11:25:31 GMT

Hi,

I want to create a user in CSA Management Console and Marketplace portal. I don't have LDAP access and hence I'm going for a local user.

I followed following steps for user addition in CSA:

1. Logged in to CSA application server.

2. Encrypted password along with role with following command:

java -jar passwordUtil-standalone.jar encrypt <password>,CSA_ADMIN,enabled

Output of this command gave me an encrypted password.

3. Edited provider-users.properties file under path HPE\CSA\jboss-as\standalone\deployments\idm-service.war\WEB-INF\classes

Added a new user with following string:

myuser=ENC(<encrypted password given by above command>)

4. Save and tried login to CSA Management Console with user myuser.

I'm able to login to Management Console but getting attached error every-time I click any option under my left panel.

Am I missing anything here? Please help.

Also, please guide me on the MPP user creation as well.

Regards,

Rohit

The following action signatures have changed since they were last edited.

Bshiri — Tue, 03 Sep 2019 09:28:50 GMT

Hello,

Any idea about this warning message when publishing a service design in CSA 4.94 on actions in RO ?

Action Signatures Have Changed

"The following action signatures have changed since they were last edited. It is recommended that you manually review and update these actions prior to publishing the design, as the signature differences may result in errors during provisioning. Open each action listed below to review the signature differences and make any necessary changes."

CSA/HCM Content Store - Access Manager Authentication

Lucian-Revnic — Wed, 14 Aug 2019 18:04:42 GMT

Earlier this year, Passport user accounts were migrated to Access Manager as part of the separation from HPE. However, ITOM Marketplace APIs such as the ones used in HCM/CSA Content Store were not able to make this migration and have continued to use Passport Credentials to authenticate. ITOM Marketplace Team announced last week the Access Manager support for all ITOM Marketplace APIs.

To update your credentials to Access Manager in Content Store, first create an Access Manager account here if you do not have one. If you access entitled software, you should also configure your entitlements and contracts in the My entitlements section here in MySupport. You can go to the Marketplace login page here and login using Access Manager to test your account if needed.

Please note Passport support will end August 30^th 2019, so please be sure to make this update before the end of the month to avoid interruptions.

HCM/CSA Content Store Configuration

To update your Content Store settings in HCM/CSA:

In the HCM/CSA Console Settings navigation frame, select Content Store.
Provide or update the following information:

Item	Description
User Name	The Micro Focus Access Manager account username.
Password	The password for the Access Manager username

Click Validate.

The validations pass/fail message appears at the top of the window.

Validation passed - the settings are all valid and the Content Store tile can be enabled.

Validation failed - one or more settings are not valid and the Content Store remains disabled.

If the validation fails, check the following:

You have access to the internet through the proxy information you provided.
Your Access Manager credentials are correct.
You have permission to access the CSA/HCM product page on the ITOM Marketplace.

Click Save when the configuration is validated to enable the Content Store tile.

HCM 2019.05 Install - Suit / Marcetplace Portal - already in use

port — Mon, 12 Aug 2019 11:13:48 GMT

Hi,

does anybody has an issue during the HCM 2019.05 installation-

Suit / Marcetplace Portal - The specified port is already in use

What ever port is used in the installer gui, the port is in use.

Thanks for help

Data Store Collection Issue Events in Cloud Optimizer

Ajay_S_N — Sat, 20 Jul 2019 07:22:30 GMT

Hi Team,

We have Cloud Optimizer 3.04 with vCenter integrated.

Sometimes we have vCenter data sources with collection failed status from GUI,

Does CO raises any event for this notification or we should manually check from GUI or from log files ?

In Cloud Optimizer how Alerts generated will be closed ?

Ajay_S_N — Sat, 20 Jul 2019 07:20:01 GMT

Hi Team,

We have Cloud Optimizer 3.04 and integrated with vCenter. There are set of Capacity Alerts generated within CO along with vCenter Events.

I can see lot of Alerts in CO but how these Alerts will be closed automatically ?

or this will be remain active always ?

How to store CSA URI in resource alias

markucha — Tue, 25 Jun 2019 11:52:26 GMT

Hi, I`m using JavaScripts for inputs validation and currently csaUri:

var csaUri = "https://fqdnServer:8444/csa";

is hardcoded in JavaScript. Can i store it in resource-alias.xml file somehow? And then how can i get exactly value "https://fqdnServer:8444/csa" from resource-alias.xml into the JS?

Thank you

User Action Input Validation for Complex password

mostafa_hassan — Tue, 25 Jun 2019 09:10:44 GMT

Dear Team,

we have requirements from customer for user action to provide Complex password in on of user Action operations,

So user has to provide password input, but since it's user input we need to validate it's complex and meet customer requirements for complex password requirements. so we have created JSP to validate password "Password-Validate.js" below content of that JSP that should be simple and forgive me if I miss something.

############################

// Password-Validate.js
//debug('hello from library');

###########################################################

from Action to edit parameter with input validation as below.

while configure Parameters we are getting error as below "Option property with the name newpass is not found. If this refers to a new property, ensure that it is saved."

it's very confusing may be I missed something or configured it wrong.

much appreciate if you can help here.

How to check CSA consumed licence.

RS5 — Sat, 01 Jun 2019 06:18:12 GMT

Hi,

I have cloud service automation 4.80.0002 installed with 400 OS instances licence.

Its been one year we are using it.

Now we have to get a report of consumed licences.

How can I find details.

Please advise.

list of patch policies from SA

connection — Tue, 07 May 2019 13:15:12 GMT

Hi Team,

I have a requirement to run patch policy from HCM MPP portal and user must select the list of patch policies available in SA, is it possible or i must create a list in desgin to display it to user.

Thank you

Subscription Migrating from CSA to HCM

CandyBean — Thu, 25 Apr 2019 02:15:29 GMT

Hello,

We are using CSA 4.6 and would like to upgrade to HCM (latest version).

Is there any way to migrate the existing subscription to new HCM? Or this is automatically done during the upgrade?

Please advise.

Thanks in advanced.

Best Regards,

Candy.

OO Flow Run from HCM

connection — Fri, 12 Apr 2019 10:59:55 GMT

Hi Team

I want to know how to run the oo flow using hcm and how add input properties which will be provided by user from MPP and map them as a inputs to oo flow.

I have added the OO as user actions and published the offereing and when run it from MPP i dont see any flow running.

When i run other offereings which are used by OO are running. Mean to say integration is working fine between OO and HCM.

Thanks

HCM PORTAL Customization

TMS — Sun, 07 Apr 2019 09:23:55 GMT

Hello,

Has anybody done customization of portal . To what extend we can customize.

In the options we can see custom Page and custom background image ;however what is the url value which we need to give.

Also can we customize the page once consumer logins in ?

Regards,

TMS

How to use proxy in HTTP/S Client for dynamic properties

Ahaeusler — Wed, 03 Apr 2019 15:35:19 GMT

Hello,

I try to write a js script to catch dynamic properties from a URL.

I'm using the HTTP/S Client which is available and tried the follwing example from the dynamic properties white paper:

var request = {

url: 'http://httpbin.org/basic-auth/user/passwd',

method: 'GET',

resourceAlias: new ResourceAlias('basic auth'),

params: { my: 'param', another: 'param' },

headers: { 'Content-Type': 'application/json', 'My-Header': 'someValue' },

data: 'some body message' };

var response = HTTPClient.call(request);

var responseBody; if (response.error) { responseBody = "error: "+response.error; } else { responseBody = "ok: "+response.body; }

The problem is, that the csa server has only access over a proxy to the internet. How can I configure the Proxy? I've tried proxy: 'IP:Port' in the request, but it didnt do anything. Is there a way to achieve this or any other way?

Thanks and best regards,
Alex

HCM and SA integration

connection — Tue, 19 Mar 2019 05:33:02 GMT

Hi Team

We have to integrate HCM with SA for automation tasks, could you please provide some help here.

Thanks

HCM oo-designer issue Readiness probe failed HTTP probe failed with statuscode 404

Ankur Malla — Mon, 25 Feb 2019 06:29:29 GMT

I deployed HCM CDF environment and i am facing an issue with oo-designer. Can some please help in rectifying this issue.

But the pod is running fine

hcm-oodesigner-5f86b5d675-rxcpj 1/2 Running

ITOM page login error

TMS — Tue, 12 Feb 2019 05:47:11 GMT

Hi Follks,

On the ITOM page and in the first master in multimaster environment, once I have added masters , workers and NFS details and proceed to Download page. It is loging me off and asking for username password . However it is not accepting the password which was working .

Any help on same is highly appreciated.

Regards,

TMS

Documentation for HCM

connection — Tue, 05 Feb 2019 07:51:28 GMT

Hi All,

I have link to down load HCM documentation and online help, but i dont see port required for HCM installation in any document, please help me to reffer the right document.

Many thanks

HCM Chatops - Slack

azoulay_dan — Thu, 31 Jan 2019 15:13:32 GMT

Hello All,

I just installed HCM chatbot, logs looks good but when i try to talk with the bot on slack nothing happen.

Could someone help ?

Thank you in advance.

Azoulay Dan

HCM: Certificate is not added to the truststore (Vertica DB - HCM2018.11) (Problem solved)

Panxatony — Tue, 18 Dec 2018 17:38:56 GMT

We install a HCM2018.11 Ultimate with a customer. Vertica DB is installed and SSL enabled. CA certificate is stored in the NFS Share. However, we always get the following message when entering the Vertica data:

Certificate is not added to the truststore

How can I check if the CA certificate is stored correctly?

Lars

--- Update 18.12.2018 ---

I checked vertica log files. Vertica demands client certificate.

2018-12-18 08:03:03.849 Init Session:7fbbb5ffb700 <LOG> @v_hcm_node0001: 00000/2705: Connection received: host=10.50.36.74 port=48236 (connCnt 1)
2018-12-18 08:03:03.849 Init Session:7fbbb5ffb700 <LOG> @v_hcm_node0001: 08V01/3533: Incomplete startup packet
        HINT:  This is often caused by load balancer health checks. These messages may be disabled by running the command: select set_config_parameter('WarnOnIncompleteStartupPacket', 0);
2018-12-18 08:03:03.850 Init Session:7fbbb5ffb700 <LOG> @v_hcm_node0001: 00000/2705: Connection received: host=10.50.36.74 port=48238 (connCnt 1)
2018-12-18 08:03:03.850 Init Session:7fbbb5ffb700 <LOG> @v_hcm_node0001: 00000/4540: Received SSL negotiation startup packet
2018-12-18 08:03:03.850 Init Session:7fbbb5ffb700 <LOG> @v_hcm_node0001: 00000/4691: Sending SSL negotiation response 'S'
2018-12-18 08:03:03.855 Init Session:7fbbb5ffb700 <LOG> @v_hcm_node0001: 08V01/7244: Could not accept SSL connection (3): error:140890C7:SSL routines:ssl3_get_client_certificate:peer did not return a certificate
2018-12-18 08:03:03.855 Init Session:7fbbb5ffb700 <FATAL> @v_hcm_node0001: {SessionRun} 08006/4777: SSL initialization failure
        LOCATION:  ProcessStartupPacket, /scratch_a/release/svrtar7858/vbuild/vertica/Session/ClientSession.cpp:4583

The installation description of Vertica also documents the creation of a client certificate. But how do I use the SSL client certificate for the HCM installation? Can I disable TLS as well? It's a test environment and actually we only want to work on automated deployment.

HCM : CSA ans OO version ?

PaulGourret — Fri, 14 Dec 2018 10:42:41 GMT

Hi,

in HCM 2018.11 which version of CSA and OO are installed ?

Thanks

Regards

HCM : "Operation Orchestration" Studio

PATDEP — Mon, 03 Dec 2018 09:40:28 GMT

did you have to install a Studio for "Operation Orchestration" with HCM ?

thanks

Regards

cancel a request in CSA

hpooStudent — Mon, 26 Nov 2018 12:54:06 GMT

hi like to chekc how do i cancel a CSA request when in the MPP portal under "In the All Requests States filter, select Cancelable." i see 0 request but in my "pending list" it shows 18 request.

i am trying to check if there are option to udpate the DB to indicate the status of the REQUEST as CANCELLED.

(CSA) Support Tip: Is ITBA part of the HCM suites?

Chris_Johnson08 — Wed, 31 Oct 2018 11:56:40 GMT

ITBA is not part of the HCM suites and is being replaced by CO, COSO tools for reporting and analytics.

HCM documentation can be found in the link: https://docs.microfocus.com/?HCM

(CSA) Support Tip:How to move CSA from one Domain to Another - CSA 4.7

Chris_Johnson08 — Wed, 31 Oct 2018 11:53:00 GMT

How to move the CSA server from current domain to a new domain

This information can be found via the knowledgebase article:KM03277128

Below are the steps for CSA Server move:-
1. Stop the CSA and MPP services.
2. Login to the server where CSA is installed.
3. Browse to \jboss-as\standalone\deployments\csa.war\WEB-INF\classes and edit csa.properties.
4. Change the value of the property csa.provider.hostname to the new FQDN.
5. Browse to \jboss-as\standalone\deployments\mpp.war and edit index.html
6. Change the value of the FQDN for the URL attribute in the meta-tag
7. Browse to \portal\conf and edit mpp.json.
8. Change the hostname used in the properties provider.url, idmProvider.url, idmProvider,returnUrl
9. Browse to \jboss-as\standalone\deployments\idm-service.war\WEB-INF\spring and edit applicationContext.properties
10. Change the value of the properties idm.csa.hostname and idm.csa.audit.hostname to the new hostname
11. If the CSA product database is installed on the same host as the CSA instance, then edit standalone.xml and search for the text "java:jboss/datasources/csaDS"
12. Edit the hostname in the tag that follows the tag.
13. Update the configuration files used by tools under CSA_HOME\Tools to use the new hostname for the database server
14. Follow configuration guide and Generate a certificate(internal or CA signed) matching new FQDN https://docs.microfocus.com/itom/Cloud_Service_Automation:4.80/Installation_and_Configuration/Configuration_Guide/MgmtConsole_SSL_Configure_mng
15. Make sure standalone.xml and mpp.json is replaced with new keystore
example:
Mpp.json:

"https": {
"enabled": true,
"options": {
"pfx": "../conf/",
"passphrase": "ENC(XPqNnuKddigQ7E8/MN70zg\u003d\u003d)",
"TLSVersions": "1.2",
"ciphers": "RSA+AESGCM RSA+AES RSA+3DES !SSLv2 !SSLv1 !aNULL !MD5 !DSS !EDH !3DES !EXPORT !DES !RC4 !PSK !aECDH !EDH-DSS-DES-CBC3-SHA !EDH-RSA-DES-CBC3-SHA !KRB5-DES-CBC3-SHA",
"secureOptions": "117440512"
}
16. After executing these steps, remove the old certificate from the \lib\security\cacerts and keystore.
17. Edit index.html at C:\HPE\CSA\jboss-as\welcome-content with new FQDN.
18. Start the CSA and MPP services

from TechBeacon: Best practices for containerized deployments

winkra — Mon, 22 Oct 2018 15:56:30 GMT

Kubernetes is all the rage for cloud apps, but follow these best practices—and don't fall into these traps—as you're making the leap, writes Vamsi Chemitiganti.

https://techbeacon.com/best-practices-anti-patterns-containerized-deployments

AWS Provider Configuration - Cannot Create VM

Trajce — Wed, 17 Oct 2018 10:06:30 GMT

Hello,

I configured the AWS Provider in HCM 2018.05 in order to do a Demo, and show how easy is to create a Vitual Machine on AWS.

I followed the official MF Video on Youtube, and the configuration went well :

https://www.youtube.com/watch?v=0C4RYAsr2kc

The Synchronisation on OO was dont with success.

When I use this offering to create a VM, the VM is undeployed automaticaly, with the "Unsupported Conficuration Error". (The requested configuration is currently not supported. Please check the documentation for supported configurations.. Error code: Unsupported. )

I used out of the box AWS provider and configured as exaplained in the video.

Do I need to confogure something else, or are there some other AWS pre-requirements?

Thanks a lot for you help.

Best regards,

Trajce

(CSA) Support Tip: 4.7 Subscriptions and catalogs are empty - duplicate users

Chris_Johnson08 — Tue, 16 Oct 2018 18:01:59 GMT

This can happen if there are duplicate users or organizations in CSA 4.7. In this case the duplicate users were in CSA and not in IDM.

Patch 3 can be applied to prevent this - but if this has occured then please contact support for a SQL script to help resolve the issue.

This can happen when CSA loses connectivity to IDM temporarily.

The support articlle can be found here:

KM03267652

(CSA) Support Tip: Are CSA 4.5 & 4.6 Vulnerable to ZipSlip

Chris_Johnson08 — Tue, 16 Oct 2018 17:55:40 GMT

CSA 4.5 and 4.6 are not vulnerable to Zip Slip.

Here is the original link: KM03246023

CSA 4.6 to 4.8 Install Issue on Linux

pred8er — Mon, 15 Oct 2018 20:32:33 GMT

Hello,

I have started the installation of a standalone test server for our CSA 4.60 build to 4.80

The Installation fails with the following errors from the /Logs folder:

BUILD FAILED

/apps/hpe/csa/Temp/build.xml:2158: Capability types import failed. check logs
at org.apache.tools.ant.taskdefs.Exit.execute(Exit.java:142)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:288)
at sun.reflect.GeneratedMethodAccessor137.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:497)
at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106)
at org.apache.tools.ant.Task.perform(Task.java:348)
at org.apache.tools.ant.Target.execute(Target.java:357)
at org.apache.tools.ant.Target.performTasks(Target.java:385)
at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1337)
at org.apache.tools.ant.Project.executeTarget(Project.java:1306)
at com.hp.csa.ia.ant.AntRunner.run(AntRunner.java:82)
at com.hp.csa.ia.util.Util.runAnt(Util.java:147)
at com.hp.csa.ia.action.postinstall.postInstallSteps.UploadContentStep.execute(UploadContentStep.java:25)
at com.hp.csa.ia.action.postinstall.postInstallSteps.AbstractPostInstallStep.executeWithCheck(AbstractPostInstallStep.java:23)
at com.hp.csa.ia.action.postinstall.PostInstallAction.install(PostInstallAction.java:46)
at com.zerog.ia.installer.actions.CustomAction.installSelf(Unknown Source)
at com.zerog.ia.installer.AAMgrBase.an(Unknown Source)
at com.zerog.ia.installer.ConsoleBasedAAMgr.ac(Unknown Source)
at com.zerog.ia.installer.ConsoleBasedAAMgr.runPostInstall(Unknown Source)
at com.zerog.ia.installer.LifeCycleManager.consoleInstallMain(Unknown Source)
at com.zerog.ia.installer.LifeCycleManager.executeApplication(Unknown Source)
at com.zerog.ia.installer.Main.main(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:497)
at com.zerog.lax.LAX.launch(Unknown Source)
at com.zerog.lax.LAX.main(Unknown Source)
15 Oct 2018 13:27:37,020 ERROR : Capability types import failed. check logs
15 Oct 2018 13:27:37,022 ERROR : /apps/hpe/csa/Temp/build.xml:2158: Capability types import failed. check logs
at org.apache.tools.ant.taskdefs.Exit.execute(Exit.java:142)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:288)
at sun.reflect.GeneratedMethodAccessor137.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:497)
at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106)
at org.apache.tools.ant.Task.perform(Task.java:348)
at org.apache.tools.ant.Target.execute(Target.java:357)
at org.apache.tools.ant.Target.performTasks(Target.java:385)
at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1337)
at org.apache.tools.ant.Project.executeTarget(Project.java:1306)
at com.hp.csa.ia.ant.AntRunner.run(AntRunner.java:82)
at com.hp.csa.ia.util.Util.runAnt(Util.java:147)
at com.hp.csa.ia.action.postinstall.postInstallSteps.UploadContentStep.execute(UploadContentStep.java:25)
at com.hp.csa.ia.action.postinstall.postInstallSteps.AbstractPostInstallStep.executeWithCheck(AbstractPostInstallStep.java:23)
at com.hp.csa.ia.action.postinstall.PostInstallAction.install(PostInstallAction.java:46)
at com.zerog.ia.installer.actions.CustomAction.installSelf(Unknown Source)
at com.zerog.ia.installer.AAMgrBase.an(Unknown Source)
at com.zerog.ia.installer.ConsoleBasedAAMgr.ac(Unknown Source)
at com.zerog.ia.installer.ConsoleBasedAAMgr.runPostInstall(Unknown Source)
at com.zerog.ia.installer.LifeCycleManager.consoleInstallMain(Unknown Source)
at com.zerog.ia.installer.LifeCycleManager.executeApplication(Unknown Source)
at com.zerog.ia.installer.Main.main(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:497)
at com.zerog.lax.LAX.launch(Unknown Source)
at com.zerog.lax.LAX.main(Unknown Source)

Any ideas?

Thank you

From TechBeacon: How to take on data management in hybrid clouds

winkra — Mon, 15 Oct 2018 15:46:45 GMT

Distributed data means distributed pain points in the hybrid cloud. David Linthicum shares best practices to head them off before they get out of hand.

https://techbeacon.com/how-take-data-management-hybrid-clouds

Using CSA API to update a subscription to recurring

nathans — Wed, 03 Oct 2018 12:01:52 GMT

Hi,

im using the API to manage the expiry of subscriptions in HPCSA (4.5). i am able to update a recurring subscription to one that expires by adding and property endDate to the subscription via the API. Certain subscriptions need to be overriden the other way around where a subscription has an endDate it needs to be updated to be recurring. does anyone know if this is possible to do via the API.

Thanks.

Showback reports azure

Guillermo — Tue, 18 Sep 2018 23:20:51 GMT

Hello

I have been configured showback reports in HCM, I created the provider Azure, I put the user ID and password, azure subscription ID, Azure tenat, billing EA access key, billing EA enrollment number and enable cloud billing integration and showback reports does not appears, I forget something else?

Note.

In the acces point try with the next options:

https://ea.azure.com

https://portal.azure.com

https://management.azure.com:443

From TechBeacon: State of DevOps 2018: 7 takeaways for peak performance

winkra — Fri, 14 Sep 2018 18:32:45 GMT

The Accelerate: State of DevOps 2018: Strategies for a New Economy report has arrived, and it's got more than a few surprises in store. Among other things: Your cloud implementation is most likely wrong, and outsourcing is not your friend when it comes to performance. Read more

CSA 4.92 apidocs.jsp redirects to CSA dashboard instead of consumption api

scuda20 — Mon, 10 Sep 2018 19:22:00 GMT

Standard OTB setup, CSA 4.92 installed on RHEL. Everything works fine except I can't get to the MPP consumption API like I could back in 4.6. Recently performed a forklift upgrade from 4.6 to 4.92 so I did not experience 4.7, 4.8.

Do I need to expose or configure it somewhere to get to the MPP consumption API?

CSA 4.9.2 changed password encryption for resource-alias.xml

Michael_it — Mon, 10 Sep 2018 08:52:25 GMT

Hi,

we just updated from CSA 4.8.2 to csa 4.9.2 we realized that after upgrade none of our dynamic js scripts did work anymore.

it boiled down to passwords in resource-aliases.xml.

CSA 4.9.2 changed whole PW encryption as it seems.

unfortunately the documentation

https://softwaresupport.softwaregrp.com/km/KM03106955/CSA_Dynamic_Options_Cascading_Lists_and_Semantic-Validation.pdf

has not been updated the passwordutil has changed completely

java -jar passwordUtil-standalone.jar --encrypt --conf /opt/csa/46/encryption local newpassword

Following keys for encryption are available: [shared, legacy, local, network]

none of the keys is usable for resource-aliases.xml.

usage of all 4 keys results in failed logins when the JS are triggered.

any one a tip how to encrypt a password in resource-aliases.xml in csa 4.9.2?

third party approval CR request no to make visible in the MPP subscription page

Arvinisaac — Tue, 04 Sep 2018 04:45:25 GMT

Hi All,

we have third party approval tool remedy where the CR request no is generated which need to be make it visible in the MPP subscription page. could please help on this weather this could be possible to achive in MPP subscription page

Configuring CSA 4.8 to use CA certificate

Eyalk — Tue, 28 Aug 2018 09:08:36 GMT

Hi,

I am following the guide "Configure CSA to Use an Internal Certificate Authority-Signed Certificate" to configure CSA to use internal CA generated certificate. After completing step 4, MPP service crashes after starting it and CSA web console is not available.

server.log file contains the following entry:

2018-08-28 02:15:20,521 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-8) MSC000001: Failed to start service jboss.server.controller.management.security_realm.CsaRealm.key-manager: org.jboss.msc.service.StartException in service jboss.server.controller.management.security_realm.CsaRealm.key-manager: JBAS015299: The KeyStore c:/Program Files/Hewlett-Packard/CSA/jboss-as/standalone/configuration/.keystore_internalca_signed does not contain any keys.
	at org.jboss.as.domain.management.security.FileKeystore.assertContainsKey(FileKeystore.java:170) [wildfly-domain-management-8.2.0.Final.jar:8.2.0.Final]
	at org.jboss.as.domain.management.security.FileKeystore.load(FileKeystore.java:121) [wildfly-domain-management-8.2.0.Final.jar:8.2.0.Final]
	at org.jboss.as.domain.management.security.FileKeyManagerService.start(FileKeyManagerService.java:119) [wildfly-domain-management-8.2.0.Final.jar:8.2.0.Final]
	at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1948) [jboss-msc-1.2.2.Final.jar:1.2.2.Final]
	at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1881) [jboss-msc-1.2.2.Final.jar:1.2.2.Final]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [rt.jar:1.8.0_25]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [rt.jar:1.8.0_25]
	at java.lang.Thread.run(Thread.java:745) [rt.jar:1.8.0_25]

Even though I completed the second step in the guide successfully and the keystore contains 2 keys (root and csa certs) .

I run the following command:

keytool.exe -list -v -keystore ..\..\jboss-as\standalone\configuration\.keystore_internalca_signed

and the output indicates the keystore does contain the 2 keys:

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 2 entries

Alias name: csa_internalca_signed_root
Creation date: Aug 28, 2018
Entry type: trustedCertEntry

Owner: *****
Issuer: *****
Serial number: b798f4be0d0f6af45245abdc3e2ddd5
Valid from: Wed Dec 13 00:50:59 MST 2017 until: Tue Dec 13 01:00:58 MST 2022
Certificate fingerprints:
	 MD5:  E1:62:A6:BB:97:23:3A:D4:70:C6:1E:D4:DA:E7:DD:71
	 SHA1: E2:9C:86:E2:3A:B7:A2:1C:3D:31:9F:16:9D:C4:FF:44:7C:87:8F:2C
	 SHA256: 1A:C2:0A:E8:7A:64:21:1F:3E:A7:1F:AA:5F:A5:AA:8D:82:D0:2E:EA:EB:C3:B0:B9:59:FE:CB:09:46:CB:89:E6
	 Signature algorithm name: SHA1withRSA
	 Version: 3

Extensions: 

#1: ObjectId: 1.3.6.1.4.1.311.21.1 Criticality=false
0000: 02 01 00                                           ...


#2: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:true
  PathLen:2147483647
]

#3: ObjectId: 2.5.29.15 Criticality=false
KeyUsage [
  DigitalSignature
  Key_CertSign
  Crl_Sign
]

#4: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: EF B6 2B 27 AF 43 F7 68   1D 62 B0 29 9A 13 FD E5  ..+'.C.h.b.)....
0010: 35 FF 32 B5                                        5.2.
]
]



*******************************************
*******************************************


Alias name: csa_internalca_signed
Creation date: Aug 28, 2018
Entry type: trustedCertEntry

Owner: *****
Issuer: *****
Serial number: 3f5a4af1000000000005
Valid from: Tue Aug 28 01:25:00 MDT 2018 until: Thu Aug 27 01:25:00 MDT 2020
Certificate fingerprints:
	 MD5:  1E:77:6F:59:E2:28:CD:0B:33:A6:AD:58:79:85:CE:04
	 SHA1: 64:9C:35:1C:E8:4C:4D:E1:AF:F2:B0:28:91:F7:8D:15:B5:05:FF:9F
	 SHA256: 01:50:94:A4:1F:92:88:42:11:87:56:40:5E:04:74:17:D1:AD:85:4E:D2:2F:E6:03:AE:FE:50:60:C2:80:18:34
	 Signature algorithm name: SHA1withRSA
	 Version: 3

Extensions: 

#1: ObjectId: 1.2.840.113549.1.9.15 Criticality=false
0000: 30 69 30 0E 06 08 2A 86   48 86 F7 0D 03 02 02 02  0i0...*.H.......
0010: 00 80 30 0E 06 08 2A 86   48 86 F7 0D 03 04 02 02  ..0...*.H.......
0020: 00 80 30 0B 06 09 60 86   48 01 65 03 04 01 2A 30  ..0...`.H.e...*0
0030: 0B 06 09 60 86 48 01 65   03 04 01 2D 30 0B 06 09  ...`.H.e...-0...
0040: 60 86 48 01 65 03 04 01   02 30 0B 06 09 60 86 48  `.H.e....0...`.H
0050: 01 65 03 04 01 05 30 07   06 05 2B 0E 03 02 07 30  .e....0...+....0
0060: 0A 06 08 2A 86 48 86 F7   0D 03 07                 ...*.H.....


#2: ObjectId: 1.3.6.1.4.1.311.20.2 Criticality=false
0000: 1E 12 00 57 00 65 00 62   00 53 00 65 00 72 00 76  ...W.e.b.S.e.r.v
0010: 00 65 00 72                                        .e.r


#3: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: caIssuers
   accessLocation: URIName: *****
]
]

#4: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: EF B6 2B 27 AF 43 F7 68   1D 62 B0 29 9A 13 FD E5  ..+'.C.h.b.)....
0010: 35 FF 32 B5                                        5.2.
]
]

#5: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: *****]
]]

#6: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
  serverAuth
]

#7: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  DigitalSignature
  Key_Encipherment
]

#8: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 85 E2 3E 4E 0D 40 CB 64   3E F5 AB 8B 6E E2 36 69  ..>N.@.d>...n.6i
0010: EC 69 75 04                                        .iu.
]
]



*******************************************
*******************************************

What can be wrong?

Thank you.

(CSA) Support Tip: CSA Sizing Guide

Sam_Liu — Fri, 24 Aug 2018 15:23:11 GMT

CSA sizing guides can be found from the links below,

https://irock.jiveon.com/docs/DOC-140765 for CSA 4.7,
https://irock.jiveon.com/docs/DOC-141219 for CSA 4.8.

(CSA) Support Tip: "unauthorized to access application" error occurs intermittently

Sam_Liu — Wed, 22 Aug 2018 22:58:03 GMT

The rights are given to users in the AD and the mapping is configured in CSA. However users get "unauthorized to access application” error intermittently and nothing is seen in the log that points to the root cause of the issue.

It is observed that LDAP configuration on CSA admin page, the LDAP server is configured with top level base DN, authentication to MPP is slow when an AD account is used.

To solve the problem, it is suggested to edit \CSA\jboss-as\standalone\deployments\idm-service.war\WEB-INF\spring\applicationContext.properties, change the property value of idm.update_group_when_login from true (default value) to false and restart CSA service.

Integrating OO Flow Library into CSA

wildbill001 — Wed, 22 Aug 2018 20:06:14 GMT

CSA is configured to display the following OO Flow Library paths in the "Action Selection Wizard"

/Library/CSA Content Pack

/Library/Integrations

While there does not seem to be any "official" documentation on the procedure, I've been told that I can edit the "hcm-csa.yaml" file. Include the OO flow library path, delete the pod, let Kube recreate the pod and proceed.

My question is:

Is there a reason why I should not just change the path(s) to show the full OO library (as can be seen in Central)? Then it is simply a matter of "set it and forget it" with respect to the Action Selection Wizard.

Bill W

Best practice to delete a provider?

wildbill001 — Wed, 22 Aug 2018 18:41:59 GMT

Once you delete resource pool, environments and all the other trappings of a provider, there does not seem to be a way to actually delete the provider itself. Or am I missing something?

If there is no way to delete the provider is there a way to disable so that other admins/users can't use it?

HCM 2018.02 (and whatever version CSA is with that version)

Bill W

How or does IDM work with CSA in the HCM Ultimate suite?

wildbill001 — Wed, 15 Aug 2018 03:31:53 GMT

i'm struggling to understand how or if Idm works, both in HCM in general, and specifically how or if it works with CSA.

Looking at the Hybrid Cloud Management 2018.05 Ultimate Administer documentation I find very little information on Idm. The document says, "The idM Administration provides the identity management services for CDF. It helps to manager users, groups of each user and Sigle sign-on to allow users using the same user name and password for multiple application."

That makes it sound like you set up a user and organization in IdM and it will "carry through" the other modules in HCM in addition to CDF. But it doesn't. I find I have to still add a user and organization to CSA, for example.

So what does IdM do and why should I care about it?

Bill W

(CSA) Support Tip: Error of “read timed out” occurs when items added to cart in MPP

Sam_Liu — Tue, 14 Aug 2018 16:12:47 GMT

Error of “read timed out” occurs when items are added to cart in MPP. This is caused by changes done on semantic validation implementations in CSA 4.8 patch 2.

To fix the problem applying the following hot fixes,
QCCR1D245179: https://patch-central.corp.hpecorp.net/crypt-web/protected/viewContent.do?patchId=QCCR1D245179&product=crypt%3Acloud_service_automation%3A&hasProdBreadcrumb=false QCCR1D245181: https://patch-central.corp.hpecorp.net/crypt-web/protected/viewContent.do?patchId=QCCR1D245181&product=crypt%3Acloud_service_automation%3A&hasProdBreadcrumb=false

Request Cloud Services from Service Manager

Abdullah Alshorman — Sun, 12 Aug 2018 09:10:45 GMT

Hi Experts,

My client have HCM and service manager, they need to request the cloud services from SM service catalog.

i believe its better to request the services from CSA MPP and integrate with SM for approval.

how i can convince them to use CSA portal to request a service?

Abdullah

(CSA) Support Tip: Information about CSA database restore

Sam_Liu — Tue, 14 Aug 2018 14:59:38 GMT

There are two databases for Cloud Service Automation (CSA). One is for CSA and the other one is for Identity Management Service (IDM). When database restore is needed, both CSA DB and IDM DB that are backed up at the same time must be restored at the same time. If only CSA DB is restored, it will cause inconsistency between databases. IDM service will not start correctly.

Where to find PDF downloads of HCM, CDF, and/or CSA(v4.92)?

wildbill001 — Thu, 02 Aug 2018 22:54:40 GMT

I've found the doc website but and losing my mind trying to follow all the hyper links. Tried the button to print "This Section" or "This Document" but all I seem to get is whatever page the browser currently has open.

Are there any links to an "All Manuals Download.ZIP" file like there used to be in the HPE days?

I'm looking for latest docs for HCM, CDF, and CSA-4.92

Thanks in advance.

Bill W

(CSA) Support Tip: How to change passwords for codarIntegrationUser and other undocumneted accounts

shu_sato — Fri, 27 Jul 2018 12:28:33 GMT

- securityEncryptedSigningKey and mppCookieSigningKey are keys consumed internally and should not be modified.

- Steps to change 'codarIntegrationUser':

Let's say the new password is 'cloud'. Steps to change password are listed below:

1. Create Encrypted Password
a. Go to <CSA_HOME>/Tools/PasswordUtil
b. Run the following command:
<CSA_HOME>/bin/java -jar passwordUtil-standalone.jar encrypt cloud,ROLE_REST,enabled
c. Copy the encrypted password.

2. Update the passwords in properties files
a. Stop CSA services
b. Create backup copy of <CSA_HOME>/jboss-as/standalone/deployments/csa.war/WEB-INF/classes/csa.properties and <CSA_HOME>/jboss-as/standalone/deployments/idm-service.war/WEB-INF/classes/provider-users.properties.
c. Go to <CSA_HOME>/jboss-as/standalone/deployments/idm-service.war/WEB-INF/classes/provider-users.properties. Replace the old encrypted password with new encrypted password of property 'codarIntegrationUser'.
d. While replacing passwords, let's the encrypted password in step '1.c' was 'abcd123' then the final value will be codarIntegrationUser=ENC(abcd123).
e. Go to <CSA_HOME>/jboss-as/standalone/deployments/csa.war/WEB-INF/classes/csa.properties and replace old encrypted password of 'securityCodarIntegrationUserPassword' with new encrypted password (similar as step '2.d').
f. Start the CSA services.

(This instructions will be added to a product guide in the future.)

(CSA) Support Tip: SSL configurations for Remote Console Service

shu_sato — Fri, 27 Jul 2018 12:25:05 GMT

SSL settings for Remote Console Service like SSL protocols used, a port to be opened and ciphers can be configured in $CATALINA_HOME/conf/server.xml. A value of CATALINA_HOME usually is '/opt/hpercs'. Actually Remote Console Service runs on Tomcat 8 and so you can refer to its reference regarding SSL settings as well as the installation guide of Remote Console Service.

Configure SSL for Remote Console Service
https://docs.microfocus.com/itom/Cloud_Service_Automation:4.92/Installation_and_Configuration/Installation_Guide/Remote_Console_-_Install

Apache Tomcat 8 Configuration Reference: SSL Support
https://tomcat.apache.org/tomcat-8.0-doc/config/http.html#SSL_Support

Fetch document attachment during subscription deployment

Eyalk — Thu, 26 Jul 2018 12:44:56 GMT

Hello,

I am using CSA 4.8, and I would like to fetch and read a CSV file attached to the request ordered in MPP, that created the subscruption that sets off the OO flow which will fetch and read the file. What is the best way to make it happen?

Thanks!

(CSA) Support Tip: CSA 4.5x reaches End of Committed Support on Jul 31, 2018

shu_sato — Thu, 19 Jul 2018 01:11:13 GMT

CSA 4.5x will reach the End of Committed Support on Jul 31, 2018. We strongly encourage customers using CSA 4.5x to upgrade to the latest version of CSA before the date. See the following sites for more details.

Obsolescence & Migrations
https://softwaresupport.softwaregrp.com/ja/obsolescence-migrations#tab2

Key Program Dates for Cloud Service Automation Foundation 4.1x, 4.2x, 4.5x, & 4.6x
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM02730606

(CSA) Support Tip: Remote Console shows "Invalid Parameters Passed to the host" error

shu_sato — Thu, 19 Jul 2018 01:10:15 GMT

Remote Console Service has been available since CSA 4.8. When you access Remote Console, you can observe "Invalid Parameters Passed to the host" error after clicking the 'Open Console' button from MPP. The error is usually caused by incorrect configurations of Remote Console Service or by guacd daemon being down.

In the former case, check if values of rcs.sharedKey in guaguacamole.properties and csa.properties are equivalent. In the latter case, make sure the guacd daemon is running by executing 'sudo service guacd status'.

See CSA 4.80/4.92 Troubleshooting Guide for more details:

https://docs.microfocus.com/itom/Cloud_Service_Automation:4.80/toc/Troubleshoot https://docs.microfocus.com/itom/Cloud_Service_Automation:4.92/Troubleshoot

Help us shape the future of Micro Focus ITOM software, and receive a $10 Amazon gift card

winkra — Mon, 16 Jul 2018 18:43:14 GMT

1000 pennies for your thoughts?

We want to know what you’re thinking and we are willing to pay for it. Micro Focus is conducting an online survey of our IT Operations Management customers, gathering feedback to help prioritize future investments. Our goal is to improve the user experience with Micro Focus software products, as well as in sales, services, and support.

In exchange for about 15 minutes of your time, you’ll instantly receive a $10 Amazon gift card. There are seven surveys in total (one for each major ITOM product category). Please choose the one(s) you have the most experience with. You will receive a gift card for each survey you complete.

Take the Hybrid Cloud Management Survey

User ID idmTransportUser not found

aballes — Tue, 10 Jul 2018 07:46:58 GMT

Hi,

I installed Cloud Service Automation 4.92 (CSA) with Operation Orchestration 10.80 (OO) and Workflow Designer embedded. CSA and OO work correctly, I have the problem with the designer.

If I go directly to designer, it shows this error "Full authentication is required to access this resource".

If first I log in CSA and then I go to the designer, it works. But after two minutes (approximately) appears this message "Your session has expired. Please log in again.". CSA continuous working.

In the log "hpcloud-idm-service" appears the following message:

2018-07-10 08:56:57,165 [default task-6] ERROR com.hp.ccue.identity.service.IntegrationUserService - User ID idmTransportUser not found
2018-07-10 09:08:11,653 [default task-8] ERROR com.hp.ccue.identity.service.IntegrationUserService - User ID idmTransportUser not found
2018-07-10 09:08:38,039 [default task-1] ERROR com.hp.ccue.identity.service.IntegrationUserService - User ID idmTransportUser not found
2018-07-10 09:08:38,428 [default task-3] ERROR com.hp.ccue.identity.service.IntegrationUserService - User ID idmTransportUser not found
2018-07-10 09:08:40,241 [default task-13] ERROR com.hp.ccue.identity.service.IntegrationUserService - User ID idmTransportUser not found

Obviously, the error is the idmTransportUser. How can I create this user? Or, how can I solve this error?

For more information I use a Oracle database 12g with all the users creates that appears at documentation.

https://docs.microfocus.com/itom/Cloud_Service_Automation:4.92/Installation_and_Configuration/Installation_Guide/Database_-_Install_Oracle

Thank you,

Alejandro Ballesteros

"RSC_PROVIDER_ID" Token is not passed to Dynamic Loading script in MPP

doubando — Tue, 10 Jul 2018 06:14:23 GMT

Dear CSA's

i have a stange issue, that the "RSC_PROVIDER_ID" token are not passed to Dynamic Loading Script in MPP, i do a debug on the script and found CSA is passing the Token as it is "[TOKEN:RSC_PROVIDER_ID], any suggestions will be much appriciated as i'm in this issue for days now.

there is another fact that i'm using the same Token on other Offering and the token value is passed correctely

- Script is used in Offering user Operations.

how to set Dynamic loading script default value

doubando — Mon, 09 Jul 2018 06:42:22 GMT

Dears

i want to know on how to make a default value for dynamic loading scripts, for instance i have below code and i want to make key2 is the default option how to achieve that

<Property> <availableValues>
<value>key1</value>
<displayName>name1</displayName>
<description>Key description</description>
<initialPrice>11</initialPrice>
<recurringPrice>1</recurringPrice>
</availableValues>
<availableValues>
<value>key2</value>
<displayName>name2</displayName>
<description>Key description</description>
<initialPrice>12</initialPrice>
<recurringPrice>2</recurringPrice>
</availableValues>
</Property>

(CSA) Support Tip: Cookie Security: Cookie not Sent Over SSL ( 4720 ) View Description CWE: 614

SuzanneZurich — Fri, 29 Jun 2018 21:48:19 GMT

The below security finding was found in a WebInspect report. Is there a specific configuration that is required or has this been addressed in a later version? What is the resolution?

The following security finding was discovered in an HPE WebInspect report:

---

Cookie Security: Cookie not Sent Over SSL ( 4720 ) View Description

CWE: 614

Kingdom: Security Features

Page: https://:8444/idm-service/idm/v0/

Request:

GET /idm-service/idm/v0/ HTTP/1.1

Referer: https://:8444/idm-service/idm/v0/login?

tenant=Provider&token=MAr55gdeM6DkDOkZvM2EabPJWn8MlOcNjgvJM6ujOXU8VkI3%

2Bkk0YDY7aSZsJW9gBzdvv3KJjfH0nBntGQuKfwJ9yrmv%

2FyGTGcawV2Y9wy9aiQQb98ZGjd4hLD3lStrBcUbUEoIFgmfX7uhJRVbFBvLkHNf1CSFjSWNw6Mi

rWYitdt5r5OwJVKzr%2BKoZmgPoyGIh%

2FNR9x6vtC6tbq4ZTCcEeAtAkFyQhkKCHxjmtg6BJprZAyeFja5Wmo%

2BS52qOGkXtm5taGWnpoCvGk9NyMgvNXW%2BXjMbjVQHI%2Fi%2FVABGP2GsBeQdIw%

2B09tWhaxzBW1P%2BOVhNeAjZzB0aRakg5voOceBqFyz2kVUDmHWA8c90PX9jnW%

2BiqJmWpszMFDgsV56pvt3iogA5gmVl7aWYWutpJtHnTnckJywZGVVd44xQs1IAFCXszlbTtbVx%

2BA%2FLWliXd7jEZV27hTenv24jbghP2hW5fRvwSX1S99%

2FmDTW3jQQZZoWOFapCQbFKlDiBqan3P8KOo1g8V48uR0EOa1

ThreadId="70"; ThreadType="CrawlBreadthFirstDBReader";

X-RequestManager-Memo: sid="35"; smi="0"; sc="1"; ID="644a1149-e814-4ddea63a-

230c43f906d4";

X-Request-Memo: ID="cf8f4a43-1074-4eb4-a4b4-ab1be82cdabd"; sc="1";

ThreadId="59";

Cookie:

CustomCookie=WebInspect131870ZXE4B9E31491814A8B924E9F7FCF88EDEFY38DC;CLIENT_

ID=09b2b7fd-1d8c-460e-b03c-7b6f7f2a7c99;JLOCALE=en-US;JREFERER=https%3A%2F%

2Fusmacsamcc001.mcc.local%3A8444%2Fcsa%2Fdashboard%

2Findex.jsp;JSESSIONID=vT5c56dwZ_tQEHq1S7Bf7jYc.usmacsamcc001

Response:

HTTP/1.1 200 OK

Expires: 0

Cache-Control: no-cache, no-store, max-age=0, must-revalidate

Set-Cookie: JLOCALE=en-US; path=/

Set-Cookie: JREFERER=https%3A%2F%2Fusmacsamcc001...TRUNCATED...

https://usmacsamcc001.mcc.local:8444/idm-service/idm/v0/login?

tenant=Provider&token=od2b4JuGiWiQmPj8buUyijybAl8WGHkcwiko6LXUKeuytH2aRk95jIdOuFy5fg2vR4ic6%

2FEfbFTFv%2FjOXbJwFN%2BKtRHRCNmZmXX%2BmU9MI3EtqnF7kVPGO%2FArycu4zuj39Ud%2FOQM8BEr%

2BmqCiuy4k8F9q8kD6Txj4wyQ69ZNqnel5THBGRwCNwzcH23VdVzw3gyc840QBMJYlX3D2iKEL%

2BcyPyzNYtDDSS0kPGzdML3b%2FHjXEVAWHCRz1vVO%2BoeF0hsw6T27O2Kk8t2D0bKK6Ru%

2BBLIIDbbN6kgQLJblet8HxPgGXihRLcRHj%2FpAle84T%2BpDuxnflfzvRuODozGKffd76w187%

2FDboKWLCFzYWnX09d82UKB1aL0hBPMM8HdOyjjMnuE8Gsd%2FqSQnoIia7Y9UhhLZ3qb6SCP5%2ByTm%

2BjjhtfNcG1Lk6lFrVFJPoFxEZ2%2FMJySMPubg8BLMRhP%2B9G9nJRMqzuAXDsbl5USM2vh2rHByvGE%

2F3WeJfwS0SHGzz3%2BfS6%2B1lMsD0BWM4kpGYL%2F%2BCsGzAP5a%2FsCGUfsa%

2FGCh4HHJ2OIfJpsem5ONiL%2BRDhvS5QpXsucl8bSuuccDfZy9OhzzR2R%

2FWiEGOdNyaWsoyXBFdMyxWIRUKqrZwQ23XXI0T3cGZ4pyQsWUfMMyw3Rx754e%

2BkG2kGFqCMieDV1nwSSZYuzJSENKILik4VgE6nBbsHmoJw%2BcB6hs8ihZ%

2BfYxphnpYWFo4EGgRsQ2fFBZRjZhfvzyws2JxrTQjgWNJBW%2FmJ5Pajro5mqZLdq3WuFwLvSaXLDoblLX9YW%

2B9athbk8fQgx4pozsb7KyKaGVABEGgRxYxk4DW3TylLBn0ZkIRGtGs2R7RV3iFgnxoaJcL%2F2M%

2F0ZJSCcLAuexuVuFUdIekxQKJOtqgv2jrO%2B5r0gdfD52jDG4M5xpsoaaHsaMYosHFJSeMIE9%

2F1squ6Br2ueN87E7lFM7EP505K9W6bOv976SEo5VJVPZx1aEfhsB3SspKtAjnkXNEMt1%2BRq67nFQlB%

2BDj2d2JpC6e%2BraPWAABls4oEE%2BCZe6okqDRunQlgRr3lUlTFUdyHHxMSU%2BpAywjBS34DOLp5S8%

2BW9VeKS3N38OseS01coMuv8uQRqwcoZM53%2BQQK9BLR6q2gEjmuKvJm8P84x7zi1nfHoHMbTbfYrbRzbMW

After analyzing the issue, it was found out that there is just one cookie which is not set with secure flag.

Set-Cookie: JLOCALE=en-US; path=/

This cookie does not hold any sensitive information and also none of the post login pages can be accessed using this cookie. Hence, this is a false positive issue.

Please see the knowledge document at https://softwaresupport.hpe.com/km/KM03191630

(CSA) Support Tip: CSA version 4.92 MPP: Depending option properties are made mandatory

SuzanneZurich — Wed, 27 Jun 2018 21:58:02 GMT

In CSA 4.92 Marketplace Portal (MPP) on initial load of a service offering, all options in an optionset are expanded by default. This causes inability to create a new subscription for offerings that contains option properties driven by JSP and that are dependent on other option properties. When a service is selected for order submission in MPP during initial load/display of service details, all optionsets and options are expanded. This causes property "A" to be mandatory if that property "A" has a binding derived from another property "B". This results in an inability to submit/checkout a new subscription.

After upgrading from version 4.8 to version 4.92, customer has many MPP offerings which are showing required fields in option sets that should not be visible. A field in an unselected option may be visible and showing required in red.

How to reproduce:

Create a new design with Subscriber options (Option 1 with some parameter) and then on Option 2 do list and create mapping to Option 1 parameter (which means customer wants to use Option 2 only after deployment via modify).

Defect QCCR1D246700 CSA 4.92 MPP: Depending option properties are made mandatory on initial load of service has been submitted. This issue has been fixed in version 4.94.

Please see the knowledge document at https://softwaresupport.hpe.com/km/KM03190570

(CSA) Support Tip: Request page shows `Undocumented error`

Rudy — Wed, 27 Jun 2018 07:17:16 GMT

Hi CSA Community,

Our team recently rectified an issue few of you may be affected by.

Symptom: When advanced group owned subscription is modified to user group owned subscription by user who created the subsctipiton. The MPP approval request page crashes.

Remedy: Fix made available to handle MPP page crash.

This will be solved completely in future releases. If by any chance you are affected by such a behavior do not hesitate to contact support for the fix.

Kind Regards,

Rudy

------------

Radostin Idealov
Customer Support
Micro Focus

(CSA) Support Tip: Custom Configuration Files when patching you CSA

Rudy — Wed, 27 Jun 2018 06:45:26 GMT

Hello CSA community,

A small tip for when you upgrade your environment. For an example you may have CSA 4.8 Patch 1 and would like to deploy Patch 2.

It is imperative that you trace any custom .xml of .html (or any other customizations for that matter) and back them up. The reason behind this is that these type of files will be wiped out by the Patch Installer (along with any other custom files like DB Java driver ojdbc7.jar etc.).

I hope this information is helpful.

Best Regards,

Rudy

---------

Radostin Idealov
Customer Support
Micro Focus

Where to find Resource Offerings for HPE Helion Cloudsystem Openstack, CSA 4.92

carlc — Tue, 19 Jun 2018 02:28:29 GMT

Hi May I know where to find Resource Offerings for HPE Helion Cloudsystem Openstack?

Thank you

CSA 4.92 with OO 10.8 stuck in Openstack Compute - Deploy, HTTP Client Get state, A trusted keystore

carlc — Sat, 16 Jun 2018 02:41:26 GMT

(CSA) Support Tip: Cookie Security: Cookie not Sent Over SSL ( 4720 ) View Description CWE: 614

SuzanneZurich — Thu, 31 May 2018 17:44:37 GMT

Please see the following security finding that was discovered in an HPE WebInspect report. How to resolve?