KB Article #179175

TransferCFT Copilot applet certificate expired - cannot connect to Copilot UI

Problem

Axway certificate used to sign the Transfer CFT Copilot UI applet gets expired


Impossible to connect to Copilot UI


It affects both HTTP or HTTPS connection

Resolution


  1. Add the Copilot URL to the Exception Site List
    1. Go to Control Panel
    2. Open the Java Control Panel
    3. Go to the Security tab
    4. Click on "Edit Site List" and add the Copilot URL to the list (for example: http://MyServer.domain.int:1766)
  2. Disable the signed code certificate revocation check
    1. From the Java Control Panel
    2. Go to the Advanced tab
    3. From the "Perform signed code certificate revocation checks on" section select the "Do not check" option
    4. Click on OK to save changes and close the Java Control Panel window
  3. Connect to Copilot UI
    1. From your web-browser connect to the Copilot UI URL.
    2. When starting the Copilot UI application, a warning message displays asking if "you want run this application?"
    3. Select "I accept the risk and want to run this application"
    4. Click on Run


More details about adding a java exception are available from this link: https://java.com/en/download/faq/exception_sitelis...


It addresses following cases:

  • If application is not signed with a certificate from trusted certificate authority.
  • If application is hosted locally.
  • Jar file not having the Permission manifest attribute.
  • Application signed with an expired certificate.
  • Certificate used to sign the application cannot be checked for revocation.