CAST HIGHLIGHT - IDE - Visual Studio Code - Extensions - Login Issues – CAST

User may face issues when trying to logging in VS Code to use the Highlight plugin in VS Code IDE. Highlight extensions helps to address issues earlier in the development cycle itself.

Details

User may get the message failed authentication or unable to get local issuer certificate when trying to login in VS Code to use the Highlight plugin in VS Code IDE.

Check whether the following pre-requisites are met
- Use of both Cloud Ready Extension and SCA extension requires an active subscription in CAST Highlight. The login process for both SCA extension and Cloud Ready extensions are different.

Cloud Ready Extension

The CAST Highlight account credentials and VS code account credentials are different when using Cloud Ready Extension for Visual Studio Code. The VS code account credentials is the one made at registration time. Visual Code extension Cloud Ready Extension doesn't use Highlight logins, it uses email address that the user chooses when registering on this page https://doc.casthighlight.com/vscode. It should be the HL company identifier, and not company name that should be provided. For details about creating an account for VS code please refer Installation instructions for the CAST Highlight CloudReady extension for Visual Studio Code

- - - The user management for this VScode extension has no direct link with CAST Highlight's user management, so user can use the userid/password information submitted in the form.
    - It can only be used on source code of application already being analyzed within CAST Highlight.
    - Before entering the credentials ensure that the project folder scanned by Highlight is open in the work space. If not click on the Open Folder button in VS Code. Then select the CAST Highlight extension icon in the activity bar (VS Code restart maybe necessary)
    - Password reset for VS Code extension may require removing and re-registering the user. For this please contact CAST Support.

SCA extension

When using SCA extension for Visual Studio Code log in should be made with your CAST Highlight credentials by clicking on the “Login” button. Please refer Installation instructions for the CAST Highlight SCA extension for Visual Studio Code

- - - In order to use the Visual Studio Code extension for SCA, you will need to have an active CAST Highlight subscription and a valid CAST Highlight user account, as well as the User Tokens feature enabled and active for the portfolio. You can either use your CAST Highlight credentials or a user token.
    - Users don't have to scan apps with CAST Highlight for using the extension.
    - User should use the correct URL https://rpa.casthighlight.com or other CAST portal where the user has an active user account (eg: https://cloud.casthighlight.com/)
Check whether the issues are network configuration related. Some times even firewall/proxy changes may be required. Please refer https://code.visualstudio.com/docs/setup/network
Check whether the login issue in VS Code is related to any SSL certificate issue such as local certificate issuer. This may result in the error unable to get local issuer certificate. This could be an internal firewall issue which would require working with the internal networks IT team so they can look at your firewall settings. Please refer https://developercommunity.visualstudio.com/t/ssl-certificate-problem-unable-to-get-local-issuer/192404
- - - Check out the VS code extension that allow windows certificates to be seen - https://marketplace.visualstudio.com/items?itemName=ukoloff.win-ca
    - For MAC operating system check “http.proxyStrictSSL” in the settings.json file to have http.proxystrictSSL as shown below
    - ZScaler uses zscaler proxy certificates. If the issue is that the CAST extension does not trust the Zscaler certificate even though it is in the OS trusted certificate store. Then try "http.systemCertificates": true,. This controls whether CA certificates should be loaded from the OS. (On Windows and macOS, a reload of the window is required after turning this off.) Please refer https://code.visualstudio.com/docs/getstarted/settings
If on ZScaler, you may need additional configuration steps for VS Code. If not configured properly you may get the message "Connexion fail".