Unable to reconfigure ITCAM for RT/Transactions KT3/T3 agent

Technote (troubleshooting)


Problem(Abstract)

When trying to reconfigure the End User Response Time Dashboard T3 Agent/Application Management Console, an "unsupported keysize or algorithm parameters" security exception occurs after ITM 6.1 Fixpack 6 was installed.

Symptom

C:\Program Files\IBM\Tivoli\common\BWM\logs\Trace-dashboard.log file contains error below:
- MIN - Thread-3 -
com.ibm.tivoli.transperf.core.util.crypto.CryptoUtil.decryptPassword(String encryptedPassword, String keyFilesDir) -
java.lang.SecurityException: Unsupported keysize or algorithm parameters
at javax.crypto.Cipher.init(Unknown Source)
at candle.kjr.util.CRYPTO.readKeyFile(CRYPTO.java:1026)
at candle.kjr.util.CRYPTO.getSecretKey(CRYPTO.java:1080)
at candle.kjr.util.CRYPTO.decrypt(CRYPTO.java:390)
at com.ibm.tivoli.transperf.core.util.crypto.CryptoUtil.decryptPassword(CryptoUtil.java:69)
at com.ibm.tivoli.transperf.dashboard.Dashboard.getDecryptedPassword(Dashboard.java:371)
at com.ibm.tivoli.transperf.dashboard.Dashboard.getConfigProperty(Dashboard.java:167)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:85)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:58)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:60)
at java.lang.reflect.Method.invoke(Method.java:391)
at mx4j.server.ReflectionMBeanInvoker.invokeImpl(ReflectionMBeanInvoker.java:156)
at mx4j.server.ReflectionMBeanInvoker.doInvoke(ReflectionMBeanInvoker.java:117)
at mx4j.server.ReflectionMBeanInvoker.invoke(ReflectionMBeanInvoker.java:52)
at mx4j.server.interceptor.InvokerMBeanServerInterceptor.invoke(InvokerMBeanServerInterceptor.java:238)
at mx4j.server.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:120)
at mx4j.server.interceptor.SecurityMBeanServerInterceptor.invoke(SecurityMBeanServerInterceptor.java:84)
at
mx4j.server.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:120)
at
mx4j.server.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:120)
at mx4j.server.interceptor.ContextClassLoaderMBeanServerInterceptor.invoke(
ContextClassLoaderMBeanServerInterceptor.java:203)
at mx4j.server.MX4JMBeanServer.invoke(MX4JMBeanServer.java:1043)
at com.ibm.tivoli.transperf.dashboard.SubnodeInit.<clinit>(SubnodeInit.java:117)

Cause

Incompatibility between the encryption level used to store the password in keyfiles keystore and the encryption level used to retrieve the password.

Resolving the problem

To correct the problem, copy the attached zip file, which contains 2 JCE policy files, into the following directory:

C:\Program Files\IBM\Java142\jre\lib\security

Make a safe copy of the following files:

C:\Program Files\IBM\Java142\jre\lib\security\local_policy.jar
C:\Program Files\IBM\Java142\jre\lib\security\US_export_policy.jar

Extract the files from JCEPolicy142.zip

Stop and restart the End User Response Time Dashboard (T3).

If this does not solve the problem, restart the whole ITM environment including the TEMS, TEPS etc. The easiest option would be to reboot the machine(s).


JCEPolicy142.zip

Cross Reference information
Segment Product Component Platform Version Edition
Systems and Asset Management Tivoli Composite Application Manager for Transactions 5724S7900 ITCAM for Transactions Routing ID Windows All Versions

Rate this page:

(0 users)Average rating

Document information


More support for:

Tivoli Composite Application Manager for Response Time
ITCAM for RT (Dist)

Software version:

6.2

Operating system(s):

Windows

Reference #:

1391171

Modified date:

2011-12-02

Translate my page

Machine Translation

Content navigation