The SAS Risk Governance Framework Administrative Tools contain command-line utilities to support the creation and management of data in the SAS Risk Governance Framework transactional data store.
By default, the SAS Risk Governance Framework Administrative Tools are stored in the following location:
<SASConfig>\Applications\SASRiskGovernanceFrameworkAdministrativeTools
These scripts might fail with a SSLHandshakeException if the middle-tier servers are configured with TLS using SAS® Deployment Wizard on SAS 9.4M9. The script fails when run manually or as part of the Content Deployment Tool. See Administration and Customization Guide | Data Management Commands for more information about these scripts.
There is no workaround for this issue.
An error occurs in the cr_tool.log when you run the SAS Risk Governance Framework Administrative Tools script as part of the Content Deployment Tool.
For example, the following error occurs in the cr_tool.log when you run the registercontent script as part of the Content Deployment Tool.
#######RUNNING RUN_ADMIN_TOOLS :: registercontent#######
Array of Command:C:\SAS\Config\Lev1/Applications/SASRiskGovernanceFrameworkAdministrativeTools//dbscripts//registercontent.cmd -c
gcm -s gcm
NOTE:Executing Command
::[C:\SAS\Config\Lev1/Applications/SASRiskGovernanceFrameworkAdministrativeTools//dbscripts//registercontent.cmd, -c, gcm, -s, gcm]
NOTE:Working Dir ::C:\SAS\Config\Lev1/Applications/SASRiskGovernanceFrameworkAdministrativeTools//dbscripts//
NOTE:STDIN file::null
SAS Risk Governance Framework
Version: 7.6 (R1F001)
Build Identifier: 202512101942321275356457 (f0rgf76p)
Build Date: December 10, 2025 at 7:43:10 PM GMT+1
Copyright (c) 2003 - 2025, SAS Institute Inc., Cary, NC, USA. All Rights Reserved.
Initializing SAS services...
SLF4J(W): No SLF4J providers were found.
SLF4J(W): Defaulting to no-operation (NOP) logger implementation
SLF4J(W): See https://www.slf4j.org/codes.html#noProviders for further details.
SLF4J(W): Class path contains SLF4J bindings targeting slf4j-api versions 1.7.x or earlier.
SLF4J(W): Ignoring binding found at
[jar:file:/C:/SAS/Home/SASVersionedJarRepository/eclipse/plugins/Geode_Full_2.0.0.0_SAS_20251028082931/log4j-slf4j-im
pl-2.17.2.jar!/org/slf4j/impl/StaticLoggerBinder.class]
SLF4J(W): See https://www.slf4j.org/codes.html#ignoredBindings for an explanation.
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'com.sas.svcs.cache.cacheableBeanPostProcessor' defined in class path resource [com/sas/svcs/data/caches/gemfire/sas_gemfire_config.xml]: Cannot resolve reference to bean 'sas_gemfire_cache' while setting bean property 'cache'
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:377)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:135)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1705)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1454)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:599)
[...]
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'sas_gemfire_cache' defined in class path resource [com/sas/svcs/data/caches/gemfire/sas_gemfire_config.xml]: Problem configuring membership services
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1806)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:600)
[...]
Caused by: org.apache.geode.GemFireConfigException: Problem configuring membership services
at org.apache.geode.distributed.internal.DistributionImpl.start(DistributionImpl.java:184)
at org.apache.geode.distributed.internal.DistributionImpl.createDistribution(DistributionImpl.java:222)
at org.apache.geode.distributed.internal.ClusterDistributionManager.<init>(ClusterDistributionManager.java:488)
[...]
Caused by: org.apache.geode.distributed.internal.membership.api.MembershipConfigurationException: Unable to join the distributed system. Could not contact any of the locators: [myhostname.mydomain.com/<unresolved>:41415]
at org.apache.geode.distributed.internal.membership.gms.membership.GMSJoinLeave.join(GMSJoinLeave.java:415)
at org.apache.geode.distributed.internal.membership.gms.GMSMembership.join(GMSMembership.java:536)
at org.apache.geode.distributed.internal.membership.gms.GMSMembership$ManagerImpl.joinDistributedSystem(GMSMembership.java:1754)
at org.apache.geode.distributed.internal.membership.gms.Services.start(Services.java:247)
[...]
Caused by: javax.net.ssl.SSLHandshakeException: Server expecting SSL handshake.
at org.apache.geode.distributed.internal.tcpserver.TcpClient.assertNotSslAlert(TcpClient.java:299)
at org.apache.geode.distributed.internal.tcpserver.TcpClient.getServerVersion(TcpClient.java:274)
at org.apache.geode.distributed.internal.tcpserver.TcpClient.getServerVersion(TcpClient.java:265)
[...]
An error occurred during initialization.
INFO:Thread ended for task::8::RUN_ADMIN_TOOLS
NOTE:Task Details=SYNC_USERS YES {"args":"-c gcm"}
Starting with SAS 9.4M9, you can configure middle-tier servers (SAS® Web Application Server, SAS JMS Broker, and Cache Locator) for TLS using SAS® Deployment Wizard during the configuration phase of a SAS deployment. Prior to SAS 9.4M9, you could configure only the SAS Web Server for TLS using SAS Deployment Wizard during deployment.
For more information, see the following resources:
With the above SSL configuration, the SAS Risk Governance Framework Administrative Tools scripts fail to make a proper SSL connection.
Additional steps are required for the scripts to work with such an SSL configuration.
Complete the steps in the documentation to establish a secure connection between the SAS Risk Governance Framework Administrative Tools scripts and the Cache Locator service.
Additional Post-installation Tasks | Enable TLS Connection for Administrative Tools.