Invalid private key alias with ANAPLAN Connect

Hi there,

I am trying to get an Import done with anaplan connect on windows. I've got to go the way with certificate authentication so I've followed the instructions in ANAPLAN Doc (https://s3.amazonaws.com/anaplanenablement/Community/Anapedia/Anaplan_Connect_v1_4_4.pdf) on Site 11 Option2:CreateaJavaKeyStore. I've done everything what was explained in the linked video (https://community.anaplan.com/t5/On-Demand-Courses/Certificate-Authentication-Process/ta-p/74752)

After Running the .bat file on windows I get following Error in the command prompt:

Anaplan API: Could not intialise service credentials (Anaplan API: Invalid Private key alias provided! (Unrecoverable key: Cannot recover key))

I am not quiet sure whats meant with the private key alias. The only alias I've written down in the .bat file is the KeyStoreAlias.

Can someone explain me what causes this error? And maybe how I can fix it?

Greetings,

Niko

Accepted answers

All comments

Stacey_Gibbens

Hi Nico,

I can surely empathize with difficulties getting the CA cert working with Anaplan Connect. I actually ended up getting personalized help from the folks at Anaplan, as we were early adopters in 2018.

Although I am unsure what is actually at issue with your process, I wondered if you've loaded your certificate public key to Anaplan Administration, under Security --> Certificates? If not, that's likely the issue.

If you continue to have an issue, I would open a ticket with Anaplan. They have level 2-3 support that will help you. They helped me a lot.

Good luck!!

Stacey

u06gr8

Also seeing a similar issue with keystore alias.

Cert is uploaded (with public key) in the "Administration, under Security --> Certificates".

Did you find a fix?

Stacey_Gibbens

What version of Anaplan Connect are you both using? I assume the newest (1.4.4)? My implementation is 1.4.2 and I've been considering when to migrate to 1.4.4 in order to gain access to the new functionality...

This would certainly be an interesting bug... Please keep us all updated!

Thanks!

Stacey

u06gr8

Yes, 1.4.4 here, albeit 2.0.0 has just been released.

I'll keep you informed. Working on this one as an aside, as well as raising through Support also.

Greg

Stacey_Gibbens

Oops. I meant to say 2.0.0 not 1.4.4. I'm giving it a little soak time to make sure I'm not the guinea pig this time... My customers are really excited about some of the new features (as am I!) but I'd like it to be stable and vetted first!

Thanks!

Stacey

Nikola

Hi Stacy,

thank you for your fast reply.

It's likely that the error I got was because of the missing public key in the anaplan administration.

I just tried to upload the public key where you described it (https://help.anaplan.com/b7b8331e-8460-4cff-a337-1b326950f518-Manage-your-Certificates)

I attached a screenshot of an error as well as the public key with some information blurred.

Do you have any idea whats the issue here? The .pem file doesn't look wrong to me.

Niko

anaplan_cert_error_114092.png

anaplan_cert_114092.PNG

Stacey_Gibbens

@Nikola Pretty sure you just need to delete everything above and below the body of the certificate (begin/end) delineation lines in the file, so the file ONLY contains:

-----BEGIN CERTIFICATE-----

body of public key

-----END CERTIFICATE-----

no extra character returns, etc. Give that a try! 🙂

Stacey

u06gr8

Just to note - there was an issue in creation of the certificate by the client's InfoSec.

A good old-fashioned, double/triple check found that there were duplicate lines in the cert, that once, amended, resolved the issue.

Thanks for your help @Stacey_Gibbens

Stacey_Gibbens

@u06gr8

Wow, wouldn't have seen that one coming. Glad it was as "simple" as that. LOL.

Stacey

Quick Links

Can you help?

Unanswered questions

Add list members to a selective access list
Hi, I am working on a solution where the User should only have access to write/edit the list members that they add from an Action on the frontend. This action adds another list member to a selective access list. The problem is, in order to run the action, you need access to the entire list, so you would see all list…
Dimensionality Issue
Hi ALL, In my model, I have Need stored at a 'D3' RS Group level. I need to use this Need in another module at the G5 Location level. I currently have a mapping module where each G5 Location maps to a D3 RS Group. This Module uses D2 Role as dimension. but the line item I've to find the RS Group (Find D3 RS Group = 'FIND…
Formula to return Connection details...
I couldn't find any formula to do this, but I want a way to put on the page/grid the connection details. This is so I know what connection I'm in rather than going into Connections details to see it. Is there an XL3 formula to return this value?