Cannot start demisto service after changing certificates.

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Cannot start demisto service after changing certificates.

L0 Member

Hello folks,


I followed the steps here to change the GUI certs to new self-signed certificates, but the service doesn't come back up.


I found below error in server tail.


error Could not load scheduled jobs [error 'database not open'] (source: /builds/GOPATH/src/gitlab.xdr.pan.local/xdr/xsoar/server/services/queue.go:1153)

warning Failed to load engines for upgrade [error 'database not open'] (source: /builds/GOPATH/src/gitlab.xdr.pan.local/xdr/xsoar/server/services/engine.go:353)


Can anyone let me know the way to troubleshoot database issue.




L4 Transporter

Hi @amados, Might be a permission issue, ensure that the pem and cert files are owned by the demisto user. 


If the issue persists, I would recommend raising a support case.

L0 Member

This issue can happen if the certificates are not correct. Just recheck the permissions of cert.key and cert.pem at /usr/local/demisto folder and ensure that the owner is set to demisto user with demisto group i.e demisto:demisto. If it still fails, just cat the cert.pem and cert.key files to recheck the certificates and key.

  • 2 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!