Identity Manager Startup Failure with HTTPS Acceptor Configuration
search cancel

Identity Manager Startup Failure with HTTPS Acceptor Configuration

book

Article ID: 100487

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal

Issue/Introduction

During the startup of CA Identity Manager, the environment fails to boot correctly and the following warning appears in the logs:

WARN [com.workpoint.server.pojo.ForceActionUpdatePvtBean] Attempt to queue a message to preload user code and web service libraries failed.: javax.jms.JMSException: Failed to create session factory

This warning is typically followed by a high volume of messaging queue errors, preventing the environment from becoming operational.

Environment

  • Product: CA Identity Manager
  • Component: Application Server Configuration / Messaging Queue
  • 14.x

Cause

This issue occurs when the application server's standalone.xml is configured with an HTTPS acceptor/connector. A sample of the problematic configuration is shown below:

xml
 
<http-connector name="http-connector" socket-binding="https">    <param key="http-upgrade-endpoint" value="http-acceptor"/></http-connector><socket-binding name="https" port="${jboss.https.port:8443}"/>

The messaging subsystem in Identity Manager is sensitive to these connector settings. Utilizing an HTTPS acceptor for these specific internal endpoints causes a failure in the session factory creation for JMS.

Resolution

HTTPS acceptor connectors are not a tested or supported configuration for Identity Manager internal messaging communication. This configuration leads to unsupported and unpredictable system behavior.

To resolve the startup failure and prevent messaging queue errors:

  1. Open the application server configuration file (e.g., standalone-full.xml).
  2. Locate the http-connector and socket-binding sections.
  3. Revert the configuration to use standard HTTP connectors for internal messaging endpoints rather than HTTPS.

Additional Information

If your organization requires the certification of HTTPS acceptor connectors, please submit an enhancement request via the Broadcom Software Communities for product management review.