KNOWLEDGE BASE

Restore error: Failed to Convert SSL Certificate to .der Format


Published: 26 May 2017
Last Modified Date: 24 Apr 2018

Issue

When attempting to restore a backup, the following error may occur, 
 
"Restore Error: Failed to convert SSL certificate to .der format."
OR
 
In-place upgrade of Tableau Server succeeds, but then Tableau Server does not start and tabadmin.log file shows,
 
"Failed to convert SSL certificate to .der format."
 
OR

Adding a worker succeeds, but then Tableau Server does nto start and tabadmin.log file shows,
 
"Failed to convert SSL certificate to .der format."

Environment

  • Tableau Server 10.0.0, 10.0.1, 10.1.1, 10.2.0, 10.3.0, 10.5.0
  • External SSL
  • Site-Specific SAML

Resolution

Option 1

As a Tableau Server Administrator, upgrade to Tableau Server 2018.1, 10.5.3. For more information, see Upgrading Tableau Server in Tableau Help. 

Option 2

For restore failure On all Tableau Server nodes, create the directory "<Tableau Server data directory>\data\tabsvc\temp" and ensure the Run As User account has Modify or Full Control permissions to this directory. By default, this directory would be at C:\ProgramData\Tableau\Tableau Server\data\tabsvc\temp. Then attempt the restore again.

For in-place upgrade failure

On all Tableau Server nodes, create the directory "<Tableau Server data directory>\data\tabsvc\temp" and ensure the Run As User account has Modify or Full Control permissions to this directory. By default, this directory would be at C:\ProgramData\Tableau\Tableau Server\data\tabsvc\temp. Then try re-running the in-place upgrade.

For failures with adding worker nodes

Disable SAML, add the worker node, then on the worker node being added, create the directory "<Tableau Server data directory>\data\tabsvc\temp" and ensure the Run As User account has Modify or Full Control permissions to this. By default, this directory would be at C:\ProgramData\Tableau\Tableau Server\data\tabsvc\temp. Then re-enable Site-specific SAML.

Cause

The configuration for Site-Specific SAML expects the directory "<Tableau Server data directory>\data\tabsvc\temp" to exist when converting the certificate file. If it doesn't, it will cause the error mentioned in this article. 

Additionally, this behavior is related to a known issue (ID: 747604) which has been fixed in a recent release of Tableau Server. 
Did this article resolve the issue?