This the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Communication Errors When Sending Content for Translation

Issue

Communication errors occur when sending content for translation.

Explanation

Your firewall is blocking access to AWS S3 and SQS. You must import the SSL certificates from AWS S3 and SQS into your Java trusted keystore. This enables HTTPS support, which means support for the SSL/TLS protocols.

Solution

The following general steps are required:

  1. Downloading or exporting the AWS SSL certificates from your browser’s certificate store. For detailed instructions, see:

  2. Importing the downloaded/exported certificates into your Java trusted keystore. The instructions are different depending on whether Java or the JRE is installed on the server where Adobe Experience Manager is hosted. For detailed instructions, see:

Note: You must update these certificates whenever AWS renews them. This is likely once a year.

1 - Importing an SSL Certificate into Your Java Trusted Keystore with Java (JDK)

You import the downloaded/exported SSL certificate into your Java trusted keystore to resolve communication issues with AWS S3 and SQS. There are different instructions depending on whether Java (JDK) or JRE is installed on the server where Adobe Experience Manager is hosted.

To import an SSL certificate into your Java trusted keystore with JRE:
  1. Run the keytool -import -alias ALIAS -file public.cert -storetype TYPE -keystore server.truststore command. For example:

keytool -import -alias teiid -file public.cert -storetype JKS -keystore server.truststore

  1. If the specified truststore already exists, enter the existing password for that truststore, otherwise enter a new password.

  2. When you are prompted to trust the certificate, enter yes.

The certificate in public.cert has been added to the new truststore named server.truststore.

2 - Importing an SSL Certificate into Your Java Trusted Keystore with JRE

You import the downloaded/exported SSL certificate into your Java trusted keystore to resolve communication issues with AWS S3 and SQS. There are different instructions depending on whether Java (JDK) or JRE is installed on the server where Adobe Experience Manager is hosted.

To import an SSL certificate into your Java trusted keystore with JRE:

  1. Run the Java keytool command to import the certificate into the keystore.

    a. Open a command prompt and change to the following directory: <location> \bin\jre\6.0\bin.

    where <location> is the file directory where Adobe Experience Manager is installed.

Note: On 64-bit computers, add the certificates to the bin64 folder.

b. Run the following command line. Although for formatting purposes the command is displayed with line breaks, you should enter the entire command on one line.

keytool -import -file "C:\&lt;location&gt;\bin\ssl\applixca.pem"

-keystore "C:\&lt;location&gt;\bin\jre\6.0\lib\security\cacerts"

-storepass "changeit"Copy

For 64-bit installations, target the 64-bit folder when dealing with the certificates. For example, this sample command targets the 64-bit jre:

cd C:\Program Files (x86)\AEM\TM1\_64\bin64\jre\6.0\binCopy

The following command is an example used on 64-bit systems. Although for formatting purposes the command is displayed with line breaks, you should enter the entire command on one line.

keytool -import -file "C:\Program Files (x86)\AEM\TM1\_64\bin64\

ssl\applixca.pem" -keystore "C:\Program Files (x86)\AEM\TM1\_64\bin64\

jre\6.0\lib\security\cacerts" -storepass "changeit"Copy

Note: If you do not correctly target the 64-bit locations for certificates when running a 64-bit installation, a warning message is displayed, indicating that you cannot contact the servers.

c. When prompted to trust or add the certificate, enter yes.

The following message is displayed: Certificate was added to keystore.

  1. You may need to restart the server where Adobe Experience Manager is hosted for the change take effect.