Technote (troubleshooting)
Problem(Abstract)
When trying to reconfigure the End User Response Time Dashboard T3 Agent/Application Management Console, an "unsupported keysize or algorithm parameters" security exception occurs after ITM 6.1 Fixpack 6 was installed.
Symptom
C:\Program Files\IBM\Tivoli\common\BWM\logs\Trace-dashboard.log file contains error below:
- MIN - Thread-3 -
com.ibm.tivoli.transperf.core.util.crypto.CryptoUtil.decryptPassword(String encryptedPassword, String keyFilesDir) -
java.lang.SecurityException: Unsupported keysize or algorithm parameters
at javax.crypto.Cipher.init(Unknown Source)
at candle.kjr.util.CRYPTO.readKeyFile(CRYPTO.java:1026)
at candle.kjr.util.CRYPTO.getSecretKey(CRYPTO.java:1080)
at candle.kjr.util.CRYPTO.decrypt(CRYPTO.java:390)
at com.ibm.tivoli.transperf.core.util.crypto.CryptoUtil.decryptPassword(CryptoUtil.java:69)
at com.ibm.tivoli.transperf.dashboard.Dashboard.getDecryptedPassword(Dashboard.java:371)
at com.ibm.tivoli.transperf.dashboard.Dashboard.getConfigProperty(Dashboard.java:167)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:85)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:58)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:60)
at java.lang.reflect.Method.invoke(Method.java:391)
at mx4j.server.ReflectionMBeanInvoker.invokeImpl(ReflectionMBeanInvoker.java:156)
at mx4j.server.ReflectionMBeanInvoker.doInvoke(ReflectionMBeanInvoker.java:117)
at mx4j.server.ReflectionMBeanInvoker.invoke(ReflectionMBeanInvoker.java:52)
at mx4j.server.interceptor.InvokerMBeanServerInterceptor.invoke(InvokerMBeanServerInterceptor.java:238)
at mx4j.server.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:120)
at mx4j.server.interceptor.SecurityMBeanServerInterceptor.invoke(SecurityMBeanServerInterceptor.java:84)
at
mx4j.server.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:120)
at
mx4j.server.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:120)
at mx4j.server.interceptor.ContextClassLoaderMBeanServerInterceptor.invoke(
ContextClassLoaderMBeanServerInterceptor.java:203)
at mx4j.server.MX4JMBeanServer.invoke(MX4JMBeanServer.java:1043)
at com.ibm.tivoli.transperf.dashboard.SubnodeInit.<clinit>(SubnodeInit.java:117)
Cause
Incompatibility between the encryption level used to store the password in keyfiles keystore and the encryption level used to retrieve the password.
Resolving the problem
To correct the problem, copy the attached zip file, which contains 2 JCE policy files, into the following directory:
C:\Program Files\IBM\Java142\jre\lib\security
Make a safe copy of the following files:
C:\Program Files\IBM\Java142\jre\lib\security\local_policy.jar
C:\Program Files\IBM\Java142\jre\lib\security\US_export_policy.jar
Extract the files from JCEPolicy142.zip
Stop and restart the End User Response Time Dashboard (T3).
If this does not solve the problem, restart the whole ITM environment including the TEMS, TEPS etc. The easiest option would be to reboot the machine(s).
| Segment | Product | Component | Platform | Version | Edition |
|---|---|---|---|---|---|
| Systems and Asset Management | Tivoli Composite Application Manager for Transactions | 5724S7900 ITCAM for Transactions Routing ID | Windows | All Versions |
Rate this page:
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.