August 21, 2018 - Important: Change in Cloud Licensing Certificates for UBL

This message is for AWS Thinkbox Deadline customers that are using Usage Based Licensing (UBL).

On August 21 2018, the Thinkbox Customer Portal will update the certificate that Deadline uses to connect to the Cloud License Server for UBL. This new certificate has been reissued through Digicert’s infrastructure to provide increased security. This certificate is included in Deadline 10.0.18.1 and later, and will be installed automatically if you run the Client installer on your render nodes. If you are using UBL, we highly recommend you upgrade to Deadline 10.0.18.1.

If you are on an older version of Deadline, or if you have upgraded to 10.0.18.1 using the Automatic Upgrading process, you will need to manually update the certificate on your render nodes. Please follow the steps listed below to update the certificates.

If the new certificate has not been installed by August 21 2018, you will see the following error message in the Deadline Slave log when it tries to use UBL. This will prevent you from rendering any jobs that require UBL.

Windows

Licensing Error: [1,7de,9,0[74000008,3c,110001d0]] Generic communications error.
[1,7de,9,0[75000001,60,300101b5]] General data transfer failure. Peer certificate cannot be authenticated with given CA certificates 

Linux

Licensing Error: [1,7de,9,0[74000008,4d,110001d0]] Generic communications error.
[1,7de,9,0[75000001,77,300101b5]] General data transfer failure. Problem with the SSL CA cert (path? access rights?)

Mac OS X

Licensing Error: [1,7de,9,0[74000008,4d,110001d0]] Generic communications error.
[1,7de,9,0[75000001,60,300101b5]] General data transfer failure. Peer certificate cannot be authenticated with given CA certificates

If you have any questions, please contact Thinkbox Support.
 

Instructions for Manually Updating the Certificates

Follow the steps below to manually update the certificates required for UBL on your render nodes. Note that there are separate instructions for each operating system.

Windows

  • Download the new certificate from https://dl.cacerts.digicert.com/DigiCertGlobalRootCA.crt.
  • Double click on the certificate.
  • Click “Open”.
  • Click “Install Certificate”.
  • Select “Current Machine”.
  • Select “Automatically select the certificate store based on the type of certificate”.
  • Click “Finish”.

Linux

openssl x509 -inform DER -in DigiCertGlobalRootCA.crt -out digicert_global_root_ca.crt
  • Finish by running this command from the Terminal:
cat digicert_global_root_ca.crt >> /var/lib/Thinkobx/Deadline10/cert/ca-certificates.crt

Mac OS X

Having trouble? Please contact Thinkbox Support.