Spectrum Server v12.x hangs on start up or throws Certificate Expired Exception


Beginning 16 October 2018, any attempt to start the Spectrum Technology Platform services will hang and fail.  This affects versions 12.0, 12.0 SP1, 12.0 SP2, and 12.0 SP2.1.

The <Spectrum>/server/app/repository/logs/wrapper.log file will show the startup process hanging at this point:

INFO   | jvm 1    | 2018/10/16 21:14:50 | INFO  [SearchGuardAdmin] Initializing Index security...

Further investigation into the <Spectrum>/index/elasticsearch/logs/SpectrumCluster.log file will show this error message:

Caused by: java.security.cert.CertificateExpiredException: NotAfter: Tue Oct 16 14:59:17 EDT 2018
        at sun.security.x509.CertificateValidity.valid(CertificateValidity.java:274)
        at sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java:629)
        at io.netty.handler.ssl.OpenSslX509Certificate.checkValidity(OpenSslX509Certificate.java:50)
        at sun.security.provider.certpath.BasicChecker.verifyValidity(BasicChecker.java:190)
        at sun.security.provider.certpath.BasicChecker.check(BasicChecker.java:144)
        at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:125)


One of the internal certificates included with Spectrum to secure communications within the software expired on 16 October 2018.


UPDATED: May 12, 2020
New certificates need to be installed via a software update.  Use these links to download the patch for the appropriate version of Spectrum.  The links provide access to the patch for Windows, the patch for Linux/Unix, and the Release Notes.

12.2.1 S02  - http://store.pbinsight.com/promo/4929653100
12.2 S21 - http://store.pbinsight.com/promo/4929653000
12.1 S35 - http://store.pbinsight.com/promo/4929652900
12.0 S38 - http://store.pbinsight.com/promo/4929652800

For customers in Japan and Latin America, contact your regional Technical Support Organizations for download information.