topic RE: could not connect to resource pool in Product Forum

could not connect to resource pool

vinodchinthakin — Mon, 07 Jun 2021 16:17:00 GMT

Hi,

when I am trying to trigger BP exposed wsdl 's in SOAP UI tool, I made the url's secured using SSL. I am facing an error while triggering Process Dispatch VBO.

"Error: could not connect to resource DispatchedProcessPool -Error establishing secure connection - The remote certificate is invalid according to the validation procedure"

I am using same SSL for process info VBO, but able to trigger successfully.

Can any one suggest how to resolve it.
@ewilson , @Dave Morris, @EmersonF.

Thanks in advance.

------------------------------
vinod chinthakindi
------------------------------

RE: could not connect to resource pool

EmersonF — Mon, 07 Jun 2021 16:44:00 GMT

If you have the certificate file, try to make it trusted, try this procedure here "Import certificate into local computer store" on page
https://docs.microsoft.com/pt-br/troubleshoot/windows-server/windows -security / instalar certificados importados # import-the-certificate-into-the-local-computer store

@Edit
Are you checking the validity of the certificate?
------------------------------
Emerson Ferreira
Sr Analista de Negócios
Avanade Brasil
+55 (081) 98886-9544
Se minha resposta superior você? Marque como útil!
------------------------------
-------------------- -----------------------
Mensagem original:
Enviado: 06-07-2021 17:17
De: vinod chinthakindi
Assunto: não foi possível conectar ao pool de recursos

Olá,

quando estou tentando acionar o wsdl exposto do BP na ferramenta SOAP UI, tornei o url protegido usando SSL. Estou enfrentando um erro ao ativar o Process Dispatch VBO.

"Erro: não foi possível conectar ao recurso DispatchedProcessPool -Erro estabelecendo conexão segura - O certificado remoto é inválido de acordo com o procedimento de validação"

Estou usando o mesmo SSL para informações do processo VBO, mas capaz de acionar com sucesso.

Alguém pode sugerir como resolvê-lo.
@ewilson,@Dave Morris,@EmersonF.

Desde já, obrigado.

------------------------------
vinod chinthakindi
-------------- ---- ------------

RE: could not connect to resource pool

vinodchinthakin — Tue, 08 Jun 2021 10:17:00 GMT

Hi @EmersonF.

I did the same thing, then copied thumbprint, used in CML and exposed processes as webservices. Now all webservices are secured. I can access them using https.

My query is when I am triggering process info not getting any error, getting response as per my requirement.
when triggering another process named process dispatch getting an "Error establishing secure connection - The remote certificate is invalid according to the validation procedure" in response.
It is not able to connect to resource pool, while triggering.

------------------------------
vinod chinthakindi
------------------------------

RE: could not connect to resource pool

ewilson — Tue, 08 Jun 2021 15:18:00 GMT

Are you using a self-signed certificate? If so, those can cause issues unless they are specifically configured as trusted within your certificate store. My recommendation would be to use a real certificate if possible. There are open source services available from Let's Encrypt and Certify The Web that can be used to get a real SSL cert for free.

Let's Encrypt
Certify the Web

There's also a VBO on the DX that can be used to disable certificate checking within a specific process. Not sure if that would help here or not. You can find that VBO here.

Cheers,

------------------------------
Eric Wilson
Director, Partner Integrations for Digital Exchange
Blue Prism
------------------------------

RE: could not connect to resource pool

vinodchinthakin — Tue, 08 Jun 2021 16:03:00 GMT

Hi @ewilson.

Thanks for your response.
I have created real ssl certificate using certify the web and used same certificate thumbprint to create RR using CLM opened in port 8182. the webservices are exposed as secured url's as https. I am able to test those url's in soap services.
My query why I am not facing same ssl certificate issue while triggering other processes, why for only process dispatch?

Even when i tried manually drag and drop a process on the resource pool in session management, showing an error resource pool is not connected blue prism.
what can be reason?

------------------------------
vinod chinthakindi
------------------------------

RE: could not connect to resource pool

vinodchinthakin — Wed, 09 Jun 2021 09:49:00 GMT

Hi @ewilson , @EmersonF
Its not about SSL certificate issue, I have checked with my team. Its about Resource Pool.

When I manually tried drag and drop a process on resource pool in session management(control room), showing an error " resource pool is currently not connected"

I deleted and created resource pool again and re-configured BP server, but still the issue persists.
Can u suggest how to resolve this

------------------------------
vinod chinthakindi
------------------------------

RE: could not connect to resource pool

ewilson — Wed, 09 Jun 2021 13:32:00 GMT

Ok, so manually dragging a process to the pool in Control Room does not work. What does the resource pool show for its state in Control Room? Does it show offline, idle, ....?

------------------------------
Eric Wilson
Director, Partner Integrations for Digital Exchange
Blue Prism
------------------------------

RE: could not connect to resource pool

vinodchinthakin — Wed, 09 Jun 2021 13:38:00 GMT

Its Idle state @ewilson. Pls find attachment

------------------------------
vinod chinthakindi
------------------------------

RE: could not connect to resource pool

EmersonF — Wed, 09 Jun 2021 14:52:00 GMT

Let me know, This Problem is only when you try run using the pool or when you try run the process using only one resource

------------------------------
Emerson Ferreira
Sr Business Analyst
Avanade Brasil
+55 (081) 98886-9544
If my answer helped you? Mark as useful!
------------------------------

RE: could not connect to resource pool

vinodchinthakin — Wed, 09 Jun 2021 15:25:00 GMT

The problem is only when I am trying to run using the pool. Not with RR.

------------------------------
vinod chinthakindi
------------------------------

RE: could not connect to resource pool

vinodchinthakin — Wed, 23 Jun 2021 12:40:00 GMT

Hi All,
The issue got resolved with the help of @ewilson.

I have followed following steps

1. Entered a DNS Definition for Machine name in Computer configuration so that it becomes same as mentioned SSL Certificate because it includes Machine Name +DNS.

Provide FQDN in place of Full computer name

2. Selected WCF Transport encryption in App server settings, provided FQDN in place of host name or Ip address and Imported Certificate.

3. In Blue prism System -> Settings select either "Register using machine name, communicate using FQDN or Register and communicate using FQDN"

------------------------------
vinod chinthakindi
------------------------------

RE: could not connect to resource pool

EmersonF — Wed, 23 Jun 2021 13:40:00 GMT

Thanks for sharing with us the solution will definitely be of great value in the future!

------------------------------
Emerson Ferreira
Sr Business Analyst
Avanade Brasil
+55 (081) 98886-9544
If my answer helped you? Mark as useful!
------------------------------

RE: could not connect to resource pool

vinodchinthakin — Fri, 10 Dec 2021 14:28:00 GMT

Are you using a self-signed certificate? If so, those can cause issues unless they are specifically configured as trusted within your certificate store. My recommendation would be to use a real certificate if possible. There are open source services available from Let's Encrypt and Certify The Web that can be used to get a real SSL cert for free.
Let's Encrypt
Certify the Web

Hi @ewilson. As per your suggestion I have used Certify the web to create real SSL certificate for free. Its been 6 months I am using certify the web to create and renewal. Now the limit is exceeded. Today while renewal I am getting below error.

"Error creating new order :: too many certificates (5) already issued for this exact set of domains in the last 168 hours: ***.canadacentral.cloudapp.azure.com: see https://letsencrypt.org/docs/rate-limits/"
I tried using Lets Encrypt, but it seems complicated for me in understanding and creating ssl cert.
Can you suggest any other opensource services like website or tool that can be used to get a real SSL certificate for free.

Thanks

------------------------------
vinod chinthakindi
------------------------------

RE: could not connect to resource pool

ewilson — Fri, 10 Dec 2021 17:05:00 GMT

Hi @vinod chinthakindi,

Both Let's Encrypt and Certify the Web include a feature for revoking certificates. If you created a lot of test certs you can always revoke the existing ones which should then make it possible for you to generate new certs.

Cheers,

------------------------------
Eric Wilson
Director, Integrations and Enablement
Blue Prism Digital Exchange
------------------------------

RE: could not connect to resource pool

vinodchinthakin — Mon, 13 Dec 2021 05:09:00 GMT

Thanks @ewilson. Your solution worked for me. I have revoked previous expired certificates and created a new one. It worked.
But only thing is new certificate is reflected on next day after creating it. Any way my problem is resolved.

Thanks

------------------------------
vinod chinthakindi
------------------------------