Quick Answer:
Informatica PowerCenter 9.6 Admin SSL errors occur because the installer creates a self-signed certificate that browsers do not trust, so the safest quick fixes are to disable HTTPS for the Admin console or bypass the GUI entirely by using the powerful command line tools for all administration tasks instead
Inforamtica PoweCenter 9.6 Problem Description:
While attempting to connect to PowerCenter Informatica Administrator on Production
https:// etl1.mycompany.com:8443/administrator/
One of the following error message(s) is displayed, which differs from browser to another:
SSL_ERROR_NO_CYPHER_OVERLAP
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
SSL_ERROR_UNSUPPORTED_VERSION
-Installation log to be examined and got the following msg :
Command Executed : /usr/java6_64/jre/bin/keytool -genkey -alias infa_dflt -keyalg RSA -keypass ***** -storepass ***** -keystore /obi/Informatica//tomcat/conf/Default.keystore -dname CN=etl1,OU=Informatica,O=Informatica,L=RedwoodCity,S=California,C=US
Reason Of Failure :
This message indicates that PC installer created a self-signed certificate.
Please be aware that a self-signed certificate is different from a trusted certificate that you can buy from CA/Verisign
Action Plan :
These errors might contain different syntax and vary from browser to browser, However they all have the same meaning. The web browser doesn’t know where the self-signed certificate came from and is simply alerting you that the certificate cannot be trusted.
1-Turn off SSL Connectivity in PowerCenter and do not use secure HTTPS connections to communicate with Informatica Administrator.
-Login to Informatica Unix Server :
#Disable the Informatica services.
#Take a backup of the nodemeta.xml file, located under <INFA_HOME>isp/config
#Run the following command to set HTTPS port to 0:
This will disable HTTPS and enable regular HTTP access.
Run the following command on all gateway nodes:
infasetup.sh updateGatewayNode -hs 0
#Enable the Informatica services.
2-As a workaround :
We can use the Informatica PowerCenter command line commands to get the same functionality of admin page .
Informatica Powercenter 9.6 includes a variety of command line programs that allow users to manage the Informatica domain, application services, and objects. These programs are essential for tasks such as:
- Accessing and administering licenses and log events.
- Exporting and importing objects and user accounts.
- Managing workflows.
- Performing repository administration tasks.
- Loading and managing resources.
- Importing and exporting models and custom resources.
- Creating, deleting, backing up, and restoring Metadata Manager repository contents.
- Migrating resources from a previous version of Metadata Manager to the current version.
For a comprehensive list of commands and options for the Informatica command line programs, refer to the official Informatica documentation.
FAQ
1. What is the issue with Inforamtica PoweCenter 9.6 Admin SSL errors?
The Informatica Administrator URL shows browser SSL errors like SSL_ERROR_NO_CYPHER_OVERLAP, ERR_SSL_VERSION_OR_CIPHER_MISMATCH, or SSL_ERROR_UNSUPPORTED_VERSION because it uses a self-signed certificate created during installation, which browsers do not trust.
2. Why do browsers report SSL_ERROR_NO_CYPHER_OVERLAP or ERR_SSL_VERSION_OR_CIPHER_MISMATCH?
These errors appear because the SSL certificate is self-signed and not issued by a trusted Certificate Authority, so the browser cannot verify its authenticity and blocks or warns against the connection.
3. What causes the self-signed certificate in Informatica PowerCenter 9.6?
During installation, PowerCenter runs a keytool command that generates a default self-signed certificate (Default.keystore) instead of a trusted CA-signed certificate, triggering SSL trust issues.
4. What is the first recommended fix for these SSL display errors?
The primary fix is to disable SSL for Informatica Administrator by turning off HTTPS and accessing the console over HTTP instead of HTTPS.
5. How do you disable HTTPS (SSL) for the Informatica Administrator console?
On the Unix server, stop Informatica services, back up nodemeta.xml, run infasetup.sh updateGatewayNode -hs 0 on all gateway nodes to set HTTPS port to 0, then restart services to use HTTP.
6. What is the second workaround if the Admin web page remains unusable?
As a workaround, use Informatica PowerCenter 9.6 command line tools to perform admin tasks instead of relying on the web-based Administrator page.
7. What can be done with Informatica PowerCenter 9.6 command line tools?
Command line programs let you manage domains, services, workflows, repositories, licenses, logs, resources, and perform export, import, backup, restore, and migration operations without the GUI.
8. Why is using a trusted CA certificate preferable to a self-signed one?
A trusted CA certificate is recognized by browsers and operating systems, eliminating SSL warnings and ensuring secure, trusted HTTPS communication for production environments.
9. Where can I find official Informatica guidance on these SSL errors?
Official details and steps are documented in Informatica Knowledge Base articles for SSL errors and for disabling HTTPS in the domain.
References:
HOW TO: Disable HTTPS (SSL connectivity) for Admin console in the Domain (informatica.com)
