I am not able to login to the Management Server from the Management Server dialog from FlexBuilder

Question

hi,
  I am trying to setup the flex builder project for the demo host sample and am running into issues with the login. I have my OEM setup in https://<ip-address>:7801/em and am able to login with the credentials. Now, when I try to launch the HostSample.html from the flex builder project and the details are provided to my Management Server dialog, the same credentials fail with some IO Error. Please help
Error during operation: Logging in to Management Server
[FaultEvent fault=[RPC Fault faultString="HTTP request error" faultCode="Server.Error.Request" faultDetail="Error: [IOErrorEvent type="ioError" bubbles=false cancelable=false eventPhase=2 text="Error #2032"]. URL: https://10.105.219.188:7801/em/websvcs/mpws/LoginService"] messageId=null type="fault" bubbles=true cancelable=true eventPhase=2]
The LoginService.login is failing.
Here is the Item details
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <SOAP-ENV:Header>
    <ns0:TraceRequest xmlns:ns0="http://em.oracle.com/tracing/xsd">
      <ns0:ecid>15D0C25A-51F9-B29F-EC74-DDD780ACCCEE</ns0:ecid>
    </ns0:TraceRequest>
    <ns1:RslVersion xmlns:ns1="http://em.oracle.com/auth/xsd">
      <ns1:rslVersion>12.1.0.3.0</ns1:rslVersion>
    </ns1:RslVersion>
    <ns1:InternalToken xmlns:ns1="http://em.oracle.com/auth/xsd">
      <ns1:intToken>secret-token</ns1:intToken>
    </ns1:InternalToken>
  </SOAP-ENV:Header>
  <SOAP-ENV:Body>
    <tns:loginRequest xmlns:tns="oracle.sysman.emx.LoginService">
      <loginInfo>
        <username>sysman</username>
        <password><my password text in plain text format></password>
        <role xsi:nil="true"/>
      </loginInfo>
    </tns:loginRequest>
  </SOAP-ENV:Body>
</SOAP-ENV:Envelope>

Answer 1

When running with HTTPS, FlexBuilder enforces security restrictions on same domain policy and verifies security certificate.  To workaround this you either have to disable security on your OMS and use HTTP for your development (using emctl secure unlock), or you have to install the security certificate from your OMS in the IE browser you are launching from FlexBuilder.
To install the certificate in Firefox:  go to the EM website using Firefox, and you will see "The Connection is Untrusted", expand "I Understand the Risks" and click "Add Exception".  On the dialog that appears leave all the defaults and click "Confirm Security Exception".  At that point if you close/reopen the browser you can go back to the EM website and you should see no security exception.
To install the certificate in IE:  go to the EM website using IE and you should see "There is a problem with this website's security certificate", click "Continue to this Website (not recommended)", the address bar will then change to show "Certificate error" on the right side of the URL.  Click that icon and the "View certificates" on the "Untrusted Certificate" popup.  On the dialog that appears, click the "Certification Path" tab, then click the root node (root certificate) in the path and click "View Certificate".  In the new dialog that appears, click "Install Certificate...".  Then click "Next>", click "Place all certificates in the following store", click "Browse..."., select "Trusted Root Certification Authorities" and click "OK".  Then click "Next>" and click "Finish".  On the "Security Warning" dialog, click "Yes" to install the certificate and then "OK on the confirmation dialog.  Click "OK" on the "Certificate" dialog (there should be two) that was launched to install the root certificate.  Now on the original "Certificate" dialog click "View Certificate".  Then click "Next>", click "Place all certificates in the following store", click "Browse..."., select "Trusted Root Certification Authorities" and click "OK".  Then click "Next>" and click "Finish" and then "OK on the confirmation dialog. Click "OK" and "OK". At that point if you close/reopen the browser you can go back to the EM website and you should see no security exception.