Aras Support Bulletin 2024013101 - Self Service Reporting Feature End of Life

William Turner — Thu, 30 May 2024 16:29:01 GMT

Aras Support is writing this support bulletin regarding the changes to Aras Innovator Release 31 in Q2 2024.

Summary:

Aras Self Service Reporting (SSR) is a platform capability provided to Aras subscribers that allows users to create and run reports on Aras Innovator data. The SSR feature is based on technology that Aras Innovator will no longer support starting in Release 31 of Aras Innovator. The SSR feature will continue to work on lower releases of Aras Innovator, including Release 30 available in February of 2024.

Workaround:

Aras will not provide any support for SSR starting with Release 31. It will not be possible to continue to use the SSR feature once upgraded to this latest version.

Target Resolution:

Starting with Aras Innovator Release 28, Aras has providing a new platform component called Aras Reporting, which provides convenient reporting capabilities within configurable dashboards. Aras Reporting is not a direct replacement for SSR and no upgrade path is provided. Customers should plan to migrate their SSR reports to the new Reporting functionality in advance of an upgrade to Release 31 or later.

Migration of reports is not included in Aras Upgrade Services, and so customers will need to plan internally how to address this change, if affected.

System Administration Training - Maintenance of Aras OAuth Certificates

William Turner — Wed, 13 Apr 2022 13:06:00 GMT

Replacement of Aras OAuth Certificates

The Aras Innovator authentication server uses certificates to ensure secure authentication. The certificates installed with Aras Innovator by default should be updated every 2 years. Either this will be done as part of an upgrade to the latest version or it must be done by the System Administrator. The following article will provide a technical summary of the process, and it is recommended that this be performed 6 months before the end of life date for the version of Aras Innovator running, If you need to follow this process, please consider contacting Aras to discuss upgrading to the latest version of Aras Innovator before the version reaches the EOL date. ( Please reference the Support Matrix for the EOL dates https://community.aras.com/subscriber-portal/p/support-matrix )

Summary:

Aras OAuth Server

On installation, the Aras OAuth Server creates certificate files to authenticate server-to-server communication.

These certificates are preconfigured to be valid for 825 days.

As a result, Subscribers using the following versions will be required to replace these certificates prior to expiration.

Symptoms

All users report a failure when uploading a File to the vault that was working previously without any configuration changes. In this event the Administrator can check the behavior by uploading a file through the Administrative access (Administration -> File Handling -> Files) If the upload returns a "DoPhysicalFiles" error, then this indicate the certificate expiration should be checked on the server.

To confirm if the certificates are expired, Administrators can do the following:

Log on to the server hosting the OAuth Server
Navigate to the installation folder
Browse to the OAuthServer\App_Data\Certificates subdirectory
Double click on any of the *.cer files listed.
Confirm if the "Valid to" date listed on the General tab is in the past.

If the certificate has expired, you will need to follow the steps outlined.

Affected versions

Aras Innovator 12.0, all Service Packs
Aras Innovator Release 14+

Target Resolution:

To resolve this issue, new certificates must be generated. There are 2 options for generating certificates defined below.

No matter which option you choose to generate certificates, the same steps that follow will be used to deploy the certificates.

Generating certificates option 1: Purchase a certificate

Buy a certificate from a Trusted Certificate Authority. Buying a certificate from a trusted authority allows the expiration date to be set to any value.

Generating certificates option 2: Generate a new certificate manually

It is possible to use Aras to generate a new certificate valid for your environment using tools provided by Aras.

Download the "CreateOAuthCertificate" script from the Aras FTP site that matches your software version
Download OpenSSL (see https://www.openssl.org/ )
Install OpenSSL into the same folder as the "CreateOAuthCertificate" script
From the command prompt, change directory to the script folder
1. Example: cd "C:\temp\CreateOAuthCertificates"
Run the script 5 times (once for each component that requires a certificate).
- CreateOAuthCertificate.bat AgentService <password>
- CreateOAuthCertificate.bat InnovatorServer <password>
- CreateOAuthCertificate.bat SelfServiceReporting <password>
- CreateOAuthCertificate.bat OAuthServer <password>
- CreateOAuthCertificate.bat VaultServer <password>

The certificates are created in an \Output folder relative to the batch file location.

Deployment of certificates

Use the following steps to deploy the certificates generated in either option above.

In case of any problems before deploying changes, please perform a backup of the instance in case rollback of the changes is required.

Notify users that the system will be down at a scheduled time, and that they should log out of the system prior to the start of the process. It is best to give at least a 24-hour notice, as well as a reminder 15 minutes prior to taking the system off-line.
Back up the code tree:
The ‘Code Tree’ refers to files and folders installed to the disk when Aras Innovator was first installed.

The default path for the Code Tree installation would be something is

C:\Program Files(x86)\Aras\Innovator

You can confirm the installation folder with the following steps:
1. From the Start Menu, select Start --> Setting --> Control Panel.
2. From the Control Panel, select Programs and Features.
3. Search for the Aras Innovator entry.
  The entry should display the physical installation path.
  Once you have determined where the code tree is installed, backup the folder and all its contents
Disconnect all users from the database.
Note: The easiest way to prevent client sessions from committing any further changes to the database is to change the database connection string in the InnovatorServerConfig.xml from “<DB-Connection…” to <xDB-Connection” and restart the w3svc service(IIS). This expires all sessions and prevents all new connections to the Aras Innovator database through the existing instance.
Copy the files to each component
1. <Agent Service installation folder>\App_Data\Certificates
  1. AgentService.pfx
  2. OAuthServer.cer
2. <Conversion Server installation folder>\App_Data\Certificates
  1. ConversionServer.pfx
  2. OAuthServer.cer
3. <Aras Innovator installation folder\Innovator\Server\App_Data\Certificates
  1. InnovatorServer.pfx
  2. OAuthServer.cer
4. <OAuth Server installation folder>\App_Data\Certificates
  1. AgentService.cer
  2. ConversionServer.cer
  3. InnovatorServer.cer
  4. OAuthServer.cer
  5. OAuthServer.pfx
  6. SelfServiceReporting.cer
  7. VaultServer.cer
  8. VaultServer.pfx
5. <Aras Innovator installation folder>\SelfServiceReporting \Server\App_Data\Certificates
  1. OAuthServer.cer
  2. SelfServiceReporting.pfx
6. <Vault Server installation folder>\App_Data\Certificates
  1. OAuthServer.cer
  2. VaultServer.pfx
Verify the passwords match what was entered for in step 4 for each OAuth.config:
1. AgentService\OAuth.config
2. Innovator\Server\OAuth.config
3. OAuthServer\OAuth.config
4. SelfServiceReporting\OAuth.config
5. VaultServer\OAuth.config
  Note: In each file the password is stored in the oauth\client\secret\certificate\@password attribute.
  
  Optionally, starting in Aras Innovator 12.0 SP1, the passwords can be encrypted using the RsaCrypt.exe tool found on the Aras Innovator CD Image. Encryption steps are outlined in the Installation Guide.
Update the password as necessary
Restart IIS on each server
Restart the Agent Service

Subscriber Portal

Andrew Neiman — Mon, 11 Apr 2022 16:45:58 GMT

William Turner さんの グループ アクティビティ

Aras Support Bulletin 2024013101 - Self Service Reporting Feature End of Life

System Administration Training - Maintenance of Aras OAuth Certificates

Subscriber Portal

William Turner さんのグループアクティビティ